PT-2017-9382

Name of the Vulnerable Software and Affected Versions Sleipnir 4 Black Edition for Mac versions 4.5.3 and earlier Sleipnir 4 for Mac versions 4.5.3 and earlier Description The issue may allow a remote attacker to spoof the URL display via a specially crafted webpage. Recommendations For Sleipnir ...

CVE-2014-9983

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...

Code injection

In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges...

FreeBSD : FreeBSD -- ipfilter(4) fragment handling panic (51d1282d-420e-11e7-82c5-14dae9d210b8)

ipfilter4, capable of stateful packet inspection, using the 'keep state' or 'keep frags' rule options, will not only maintain the state of connections, such as TCP streams or UDP communication, it also maintains the state of fragmented packets. When a packet fragments are received they are cached...

RHEL 7 : collectd (RHSA-2017:1285)

An update for collectd is now available for RHEV 4.X RHEV-H and Agents for RHEL-7 and RHEV Engine version 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

lcms: Heap-buffer-overflow in TetrahedralInterpFloat

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://oss-fuzz.com/testcase?key=4857091871211520 Project: lcms Fuzzer: afllcmscmstransformfuzzer Fuzz target binary: cmstransformfuzzer Job Type: aflasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

CVE-2017-7504

HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Application Server = Jboss 4.X does not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via...

Release Notes for Veeam Management Pack 8.0 Update 4

Challenge Release Notes for Veeam Management Pack 8.0 Update 4. Cause Please confirm you are running Veeam Management Pack 8.0 prior to installing this update. You can check this in Operations Manager console under Administration | Management Packs, the build number should be 8.0.0.2218 or later...

[SECURITY] Fedora 24 Update: kdelibs-4.14.30-2.fc24

Libraries for KDE 4...

[SECURITY] Fedora 26 Update: kdelibs-4.14.30-2.fc26

Libraries for KDE 4...

[SECURITY] Fedora 25 Update: kdelibs-4.14.30-2.fc25

Libraries for KDE 4...

lsps2007.cam-content.com XSS vulnerability

Vulnerable URL: http://lsps2007.cam-content.com/SearchEx.aspx?searchbox=1=erotik-kleinanzeigen-com=a%3e%27%3e%22%3et%3ci%3ep%3cimgsrc%3dyonerror%3dprompt%2fopenbugbounty%2f%3e=Unbekannte+Anmeldedaten=a%3e%27%3e%22%3et%3ci%3ep%3cimg+src%3dy+onerror%3dprompt%2fopenbugbounty%2f%3e Details:...

CVE-2015-5436

A potential security vulnerability has been identified with HP Integrated Lights-Out 4 iLO 4 firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service DoS. Note this was originally published in 2015 however the CVE ent...

Code injection

A potential security vulnerability has been identified with HP Integrated Lights-Out 4 iLO 4 firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service DoS. Note this was originally published in 2015 however the CVE ent...

CVE-2015-5436

A potential security vulnerability has been identified with HP Integrated Lights-Out 4 iLO 4 firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service DoS. Note this was originally published in 2015 however the CVE ent...

CVE-2015-5436

HP Integrated Lights-Out 4 (iLO 4) firmware versions 2.11 through 2.29 are affected by CVE-2015-5436; the vulnerability could be exploited remotely to cause a Denial of Service (DoS). Public technical details are limited in the provided documents; exploitation status is not specified. Remediation...

CVE-2015-5436: Undefined Security Weakness

A potential security vulnerability has been identified with HP Integrated Lights-Out 4 iLO 4 firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service DoS. Note this was originally published in 2015 however the CVE ent...

ffmpeg: Heap-buffer-overflow in sbr_x_gen

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5075102901207040 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDAACfuzzer Fuzz target binary: ffmpegAVCODECIDAACfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

fit-4.net XSS vulnerability

Vulnerable URL: http://www.fit-4.net/Fit4Net/Webhosting/Webdesign/Bad-Elster/Fit4Net-Domaincheck-Domain-frei/23.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Threat Outbreak Alert RuleID28988: Email Messages Distributing Malicious Software on May 4, 2017

Medium Alert ID: 53714 First Published: 2017 May 4 19:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28988 may contain the following files: Name | Size ...