Fedora 20 : wireshark-1.10.9-1.fc20 (2014-9112)

Ver. 1.10.9; Security fix for CVE-2014-5164, CVE-2014-5165, CVE-2014-5163, CVE-2014-5161, CVE-2014-5162 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

Fedora Update for wireshark FEDORA-2014-9112

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wireshark Multiple Denial of Service Vulnerabilities-01 (Aug 2014) - Windows

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-5161

The dissectlog function in plugins/irda/packet-irda.c in the IrDA dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packet...

CVE-2014-5161

The dissectlog function in plugins/irda/packet-irda.c in the IrDA dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packet...

CVE-2014-5161

Wireshark 1.10.x before 1.10.9 is affected by CVE-2014-5161 in the IrDA dissector (dissect_log). The issue arises because the dissector does not properly strip newline characters, enabling a remote attacker to trigger a denial-of-service via a crafted packet that can cause a buffer underflow and ...

KLA10400 DoS vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities 1. Improper handling of n and r symbols can be exploited remotely via a specially designed packet; 2. Improper...

LimeSurvey 2.00+ (build 131107) - Multiple Vulnerabilities

No description provided by source. ? LimeSurvey v2.00+ build 131107 Script Insertion And SQL Injection Vulnerability Vendor: LimeSurvey Project Team Product web page: http://www.limesurvey.org Affected version: 2.00+ build 131009 2.00+ build 131022 2.00+ build 131031 2.00+ build 131107 Summary:...

GLSA-201405-06 : OpenSSH: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201405-06 OpenSSH: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenSSH. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could execute arbitrary code, cause a...

AIX OpenSSH Advisory: openssh_advisory.asc

The version of OpenSSH running on the remote host is affected by the following vulnerabilities : - X11 man-in-the-middle attack: When attempting to bind2 to a port that has previously been bound with SOREUSEADDR set, most operating systems check that either the effective user-id matches the...

LimeSurvey 2.00+ Build 131107 Cross Site Scripting / SQL Injection

LimeSurvey v2.00+ build 131107 Script Insertion And SQL Injection Vulnerability Vendor: LimeSurvey Project Team Product web page: http://www.limesurvey.org Affected version: 2.00+ build 131009 2.00+ build 131022 2.00+ build 131031 2.00+ build 131107 Summary: LimeSurvey formerly PHPSurveyor is a...

LimeSurvey 2.00+ (build 131107) - Multiple Vulnerabilities

LimeSurvey v2.00+ build 131107 Script Insertion And SQL Injection Vulnerability Vendor: LimeSurvey Project Team Product web page: http://www.limesurvey.org Affected version: 2.00+ build 131009 2.00+ build 131022 2.00+ build 131031 2.00+ build 131107 Summary: LimeSurvey formerly PHPSurveyor is a...

Apple iOS密码锁安全限制绕过漏洞

CVE ID: CVE-2013-5161 iOS是由苹果公司为移动设备所开发的操作系统，支持的设备包括iPhone、iPod touch、iPad、Apple TV。 Apple iOS 7.0.2之前版本的密码锁没有正确过滤锁定状态，物理接触受影响设备的攻击者在某些情况下可绕过密码限制，打开“照相机”应用或读取最近打开的应用列表。 0 Apple iOS 7.0.2 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5957）以及相应补丁: HT5957：About the security content of iOS 7.0.2...

CVE-2013-5161

CVE-2013-5161 affects Apple iOS before 7.0.2, where the Passcode Lock fails to properly manage its lock state. This allows physically proximate attackers to bypass the passcode and, while device is locked, open the Camera app or read the list of recently opened apps due to unspecified transition ...

Citrix XenApp XML Service Interface Crafted Packet Parsing Remote Code Execution (CTX135066)

The version of Citrix XenApp installed on the remote Windows host is potentially affected by an unspecified vulnerability in the XML service interface. An unauthenticated, remote attacker can exploit this to execute arbitrary code on the remote host. C Tenable Network Security, Inc...

CVE-2012-5161

CVE-2012-5161 affects Citrix XenApp 6.5 and 6.5 Feature Pack 1, via the XML Service interface. The vulnerability allows an unauthenticated, remote attacker to execute arbitrary code on the XenApp server by sending a crafted packet to the XML service interface. Exploitation details are not disclos...

CVE-2011-5161

OpenEMR 4 is affected by an Unrestricted file upload vulnerability in the patient photograph feature. An attacker can upload a file with an executable extension followed by a safe extension and then access it via a direct request to the documents/ patient directory, allowing remote code execution...

CVE-2010-5161

CVE-2010-5161 describes a race condition in F-Secure Internet Security 2010 (build 246) for Windows XP that allows local users to bypass kernel-mode hook handlers and execute code that would be blocked by a handler but not by signature-based malware detection. The underlying issue is a KHOBE/argu...

CVE-2010-5161

Race condition in F-Secure Internet Security 2010 10.00 build 246 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory chang...

SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure

The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...