[SECURITY] [DSA 3756-1] icoutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3756-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 09, 2017 https://www.debian.org/security/faq -...

Fedora 25 : chromium (2016-a815b7bf5d)

Update to Chromium 55. Security fix for CVE-2016-5199, CVE-2016-5200, CVE-2016-5201, CVE-2016-5202, CVE-2016-9651, CVE-2016-5208, CVE-2016-5207, CVE-2016-5206, CVE-2016-5205, CVE-2016-5204, CVE-2016-5209, CVE-2016-5203, CVE-2016-5210, CVE-2016-5212, CVE-2016-5211, CVE-2016-5213, CVE-2016-5214,...

Fedora 24 : chromium (2016-e0e1cb2b2b)

Update to Chromium 55. Security fix for CVE-2016-5199, CVE-2016-5200, CVE-2016-5201, CVE-2016-5202, CVE-2016-9651, CVE-2016-5208, CVE-2016-5207, CVE-2016-5206, CVE-2016-5205, CVE-2016-5204, CVE-2016-5209, CVE-2016-5203, CVE-2016-5210, CVE-2016-5212, CVE-2016-5211, CVE-2016-5213, CVE-2016-5214,...

openSUSE Security Update : Chromium (openSUSE-2016-1453)

This update to Chromium 55.0.2883.75 fixes the following vulnerabilities : - CVE-2016-9651: Private property access in V8 - CVE-2016-5208: Universal XSS in Blink - CVE-2016-5207: Universal XSS in Blink - CVE-2016-5206: Same-origin bypass in PDFium - CVE-2016-5205: Universal XSS in Blink -...

CVE-2015-5208

Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link...

CVE-2015-5208

Apache Cordova iOS prior to 4.0.0 contains a vulnerability that allows arbitrary plugin execution when a user accesses a specially crafted link. The issue affects Cordova iOS up to version 3.x and is remedied by upgrading Cordova to 4.0.0 or later and rebuilding the iOS application.

Oracle: Security Advisory (ELSA-2007-0960)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5208

CVE-2014-5208 affects Yokogawa BKBCopyD.exe in Batch Management Packages on CENTUM CS 3000 (R3.09.50 and earlier), CENTUM VP (R4.03.00 and R5.x up to R5.04.00), and Exaopc (R3.72.10). The vulnerability allows unauthenticated remote access to read arbitrary files via RETR, write arbitrary files vi...

CVE-2014-5208

BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10, does not require authentication, which allows remote attackers to read arbitrary files via a RETR operation, write to...

Yokogawa BKBCopyD.exe Client

This module allows an unauthenticated user to interact with the Yokogawa CENTUM CS3000 BKBCopyD.exe service through the PMODE, RETR and STOR operations. Module Options msf use auxiliary/admin/scada/yokogawa/bkbcopydclient msf undefinedbkbcopydclient show actions ...actions... msf...

CVE-2013-5208

CVE-2013-5208 affects HR Systems Strategies info:HR HRIS 7.9, where the database password is stored in a registry key (USERPW) with weak obfuscation. This enables a local attacker to read/decipher the password and gain full control of the database and application, including access to PII. Vendor ...

Oracle Linux 5 : Important: / hplip (ELSA-2007-0960)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0960 advisory. 1.6.7-4.1.el50.3 - Fixed post scriptlet to make sure it restarts the daemon on upgrade part of bug 320011. 1.6.7-4.1.el50.2 - Build requires openssl-devel part ...

HP Intelligent Management Center DownloadServlet Information Disclosure (CVE-2012-5208)

An information disclosure vulnerability has been reported in HP Intelligent Management Center. This protection will detect and block attempts to exploit this vulnerability...

HP Intelligent Management Center < 5.2 E401 Multiple Vulnerabilities

The version of HP Intelligent Management Center running on the remote host is potentially affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists in the 'opentoposymbolid' parameter of the 'topoContent.jsf' script. CVE-2012-5200 - Multiple code execution vulnerabiliti...

CVE-2012-5208

CVE-2012-5208 affects HP Intelligent Management Center (iMC) and iMC for ANM prior to 5.2 E0401. The connected sources identify this as an information-disclosure vulnerability (remote, via unknown vectors per ZDI-1615) that could allow an attacker to obtain sensitive information. The issue is emb...

CVE-2011-5208

CVE-2011-5208 concerns the WordPress BackWPup plugin (pre-1.4.1). The vulnerability is a directory traversal in the wpabs parameter that allows remote attackers to read arbitrary files via directory traversal sequences ("..") in two endpoints: app/options-view_log-iframe.php and app/options-runno...

CVE-2011-5208

Multiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress allow remote attackers to read arbitrary files via a .. dot dot in the wpabs parameter to 1 app/options-viewlog-iframe.php or 2 app/options-runnow-iframe.php...

CVE-2010-5208

CVE-2010-5208 affects Kingsoft Office 2010 (build 6.6.0.2477) components Presentation, Writer, and Spreadsheets. The root cause is untrusted search path/DLL hijacking via a Trojan horse plgpf.dll located in the current working directory, allowing local privilege escalation. Affected product detai...

Scientific Linux Security Update : hplip on SL5.x i386/x86_64

Kees Cook discovered a flaw in the way the hplip hpssd daemon handled user input. A local attacker could send a specially crafted request to the hpssd daemon, possibly allowing them to run arbitrary commands as the root user. CVE-2007-5208. On Scientific Linux 5, the SELinux targeted policy for...

hplip - 'hpssd.py' From Address Arbitrary Command Execution (Metasploit)

$Id: hpliphpssdexec.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...