CVE-2018-5196 Alzip Stack Overflow Vulnerability

Alzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim to open a specially-crafted LZH archive file, a attacker could execute arbitrary code execution...

Design/Logic Flaw

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16605

Summary: CVE-2017-16605 affects NetGain Systems Enterprise Manager 7.2.730 build 1034. The vulnerability is in the org.apache.jsp.u.jsp.db.save_005fattrs_jsp servlet (listening on port 8081 by default) and arises from improper validation of a user-supplied path in the id parameter, enabling a dir...

DEBIAN-CVE-2017-5196

Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via vectors involving strings that are not UTF8...

CVE-2017-5196

CVE-2017-5196 (Irssi) is an out-of-bounds read vulnerability reported in Irssi before 0.8.21, specifically in incomplete character sequences, which can cause a crash (DoS). Public advisories confirm this CVE as part of multiple issues fixed in version 0.8.21. The affected product is the Irssi IRC...

CVE-2017-5196

Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via vectors involving strings that are not UTF8...

Fedora 24 : irssi (2017-d2e7217e2a)

This is an security update fixing CVE-2017-5193, CVE-2017-5194, CVE-2017-5195, CVE-2017-5196, CVE-2017-5356. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it ...

GLSA-201701-45 : irssi: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-45 irssi: Multiple vulnerabilities Multiple vulnerabilities have been discovered in irssi. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code wit...

CVE-2016-5196

The CVE-2016-5196 entry concerns Google Chrome for Android prior to version 54.0.2840.85. The content renderer client fails to enforce the Same Origin Policy among downloaded files, allowing a remote attacker to access downloaded files and interact with sites the user is logged into via a crafted...

[ASA-201701-14] irssi: multiple issues

Arch Linux Security Advisory ASA-201701-14 ========================================== Severity: High Date : 2017-01-11 CVE-ID : CVE-2017-5193 CVE-2017-5194 CVE-2017-5195 CVE-2017-5196 Package : irssi Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-127 Summary =======...

OPENSUSE-SU-2017:0094-1 Security update for irssi

irssi was updated to fix four vulnerabilities that could result in denial of service remote crash when connecting to malicious servers or receiving specially crafted data. boo1018357 - CVE-2017-5193: NULL pointer dereference in the nickcmp function - CVE-2017-5194: out of bounds read in certain...

OPENSUSE-SU-2017:0093-1 Security update for irssi

irssi was updated to fix four vulnerabilities that could result in denial of service remote crash when connecting to malicious servers or receiving specially crafted data. boo1018357 - CVE-2017-5193: NULL pointer dereference in the nickcmp function - CVE-2017-5194: out of bounds read in certain...

Chrome for Android Update

Chrome for Android has been updated to version 54.0.2840.85; the update will be available in Google Play over the next few days. A partial list of changes in this build can be found here. This release fixes some IME regressions discovered in the previous version as well as the following security...

Fedora 21 : ntp (2015-77bfbc1bcd)

The remote Fedora 21 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2015-77bfbc1bcd advisory. Security fix for CVE-2015-7704, CVE-2015-5300, CVE-2015-7692, CVE-2015-7871, CVE-2015-7702, CVE-2015-7691, CVE-2015-7852, CVE-2015-7701 ---- Securit...

Ubuntu: Security Advisory (USN-2783-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for ntp FEDORA-2015-14212

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : ntp (2015-14212)

The remote Fedora 22 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2015-14212 advisory. Security fix for CVE-2015-5146, CVE-2015-5194, CVE-2015-5219, CVE-2015-5195, CVE-2015-5196 Tenable has extracted the preceding description block directly...

Fedora 23 : ntp (2015-14213)

The remote Fedora 23 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2015-14213 advisory. Security fix for CVE-2015-5146, CVE-2015-5194, CVE-2015-5219, CVE-2015-5195, CVE-2015-5196 Tenable has extracted the preceding description block directly...

Oxwall-1.7.0

Oxwall suffers from an authenticated arbitrary PHP code execution. The vulnerability is caused due to the improper verification of uploaded files in '/admin/settings/user' script thru the 'avatar' and 'bigAvatar' POST parameters. This can be exploited to execute arbitrary PHP code by uploading a...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-5196. Reason: This candidate is a reservation duplicate of CVE-2014-5196. Notes: All CVE users should reference CVE-2014-5196 instead of this candidate. All references and descriptions in this candidate have been removed to...