[SECURITY] [DLA 819-1] mysql-5.5 security update

Package : mysql-5.5 Version : 5.5.47-0+deb7u2 CVE ID : not assigned yet Debian Bug : 854713 It has been found that the C client library for MySQL libmysqlclient.so has use-after-free vulnerability which can cause crash of applications using that MySQL client. For Debian 7 "Wheezy", these problems...

CVE-2016-0310

IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...

CVE-2016-0310

IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...

CVE-2016-0310

IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...

CVE-2016-0310

CVE-2016-0310 affects IBM Connections 5.5 and earlier. The vulnerability is a host header injection flaw that can cause navigation to the attacker’s domain. Root cause noted in CNVD records: the program fails to properly validate HTTP request headers, enabling manipulation via the Host header. Ex...

CVE-2016-0307

IBM Connections 5.5 and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned responses...

CVE-2016-0307

CVE-2016-0307 affects IBM Connections 5.5 and earlier. The vulnerability enables remote attackers to obtain sensitive information by reading stack traces that are exposed in returned responses, indicating an information-disclosure flaw likely tied to error handling. Affected software: IBM Connect...

Command injection

EMC Data Domain OS DD OS 5.4 all versions, EMC Data Domain OS DD OS 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS DD OS 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS DD OS 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could...

CVE-2016-8216

EMC Data Domain OS (DD OS) exposes a local command injection vulnerability tracked as CVE-2016-8216. Affected are DD OS 5.4 across all versions, 5.5 family prior to 5.5.5.0, 5.6 family prior to 5.6.2.0, and 5.7 family prior to 5.7.2.10. The issue allows a local attacker to bypass the Data Domain ...

CVE-2017-3258

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols...

CVE-2017-3318

Removed by vendor...

[SECURITY] [DLA 797-1] mysql-5.5 security update

Package : mysql-5.5 Version : 5.5.54-0+deb7u1 CVE ID : CVE-2017-3238 CVE-2017-3243 CVE-2017-3244 CVE-2017-3258 CVE-2017-3265 CVE-2017-3291 CVE-2017-3312 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 Debian Bug : 851233 Several issues have been discovered in the MySQL database server. The...

DLA-797-1 mysql-5.5 - security update

Bulletin has no description...

Debian DSA-3767-1 : mysql-5.5 - security update

Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.54, which includes additional changes, such as performance improvements, bug fixes, new features, and possibly incompatible changes. Please see th...

[SECURITY] [DSA 3767-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3767-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 19, 2017 https://www.debian.org/security/faq -...

UBUNTU-CVE-2017-3313

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: MyISAM. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure wher...

Update Rollup 7 for System Center 2012 R2 Virtual Machine Manager

Update Rollup 7 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 7 for Microsoft System Center 2012 R2 Virtual Machine Manager VMM. There are three updates available for System Center 2012 R2 VMM. One update for...

PT-2016-3055 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.53 and earlier MySQL Server versions 5.6.34 and earlier MySQL Server versions 5.7.16 and earlier Description: The issue exists due to insufficient input validation in the MySQL Server component, specifically in the D...

VMware ESXi updates address a cross-site scripting issue (VMSA-2016-003) - Remote Version Check

VMware ESXi updates address a critical glibc security vulnerability SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer...