74 matches found
Ubuntu 14.04 LTS : libvirt vulnerabilities (USN-2867-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2867-1 advisory. It was discovered that libvirt incorrectly handled the firewall rules on bridge networks when the daemon was restarted. This could result in an unintende...
Ubuntu: Security Advisory (USN-2867-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security fix for the ALT Linux 8 package libvirt version 1.2.20-alt1
Oct. 22, 2015 Alexey Shabalin 1.2.20-alt1 - 1.2.20 - fixed CVE-2015-5247...
ArticleFR 3.0.6 Cross Site Scripting
ArticleFR 3.0.6 Multiple Script Injection Vulnerabilities Vendor: Free Reprintables Product web page: http://www.freereprintables.com Affected version: 3.0.6 Summary: A lightweight fully featured content article / video management system. Comes with a pluginable and multiple module framework...
CVE-2014-5247
Ganeti 2.10.0 prior to 2.10.7 and 2.11.0 prior to 2.11.5 are affected by CVE-2014-5247. The vulnerability arises from the _UpgradeBeforeConfigurationChange function in lib/client/gnt_cluster.py, which stores the configuration backup with world-readable permissions. This exposure allows local user...
CVE-2014-5247
The UpgradeBeforeConfigurationChange function in lib/client/gntcluster.py in Ganeti 2.10.0 before 2.10.7 and 2.11.0 before 2.11.5 uses world-readable permissions for the configuration backup file, which allows local users to obtain SSL keys, remote API credentials, and other sensitive information...
CVE-2010-5247
CVE-2010-5247 involves QtWeb Browser 3.3 build 043 and an untrusted search path vulnerability. Local users can gain privileges by placing a Trojan horse wintab32.dll in the current working directory, demonstrated via a directory containing .html/.htm/.mhtml files. Affected component is the browse...
openSUSE Security Update : xine-devel (xine-devel-483)
This update of xine fixes multiple buffer overflows while parsing files : - CVE-2008-3231 - CVE-2008-5233 - CVE-2008-5234 - CVE-2008-5235 - CVE-2008-5236 - CVE-2008-5237 - CVE-2008-5238 - CVE-2008-5239 - CVE-2008-5240 - CVE-2008-5241 - CVE-2008-5242 - CVE-2008-5243 - CVE-2008-5244 - CVE-2008-5245...
openSUSE 10 Security Update : xine-devel (xine-devel-5966)
This update of xine fixes multiple buffer overflows while parsing files : - CVE-2008-3231 - CVE-2008-5233 - CVE-2008-5234 - CVE-2008-5235 - CVE-2008-5236 - CVE-2008-5237 - CVE-2008-5238 - CVE-2008-5239 - CVE-2008-5240 - CVE-2008-5241 - CVE-2008-5242 - CVE-2008-5243 - CVE-2008-5244 - CVE-2008-5245...
CVE-2008-5247
The realparseaudiospecificdata function in demuxreal.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted height aka codecdatalength value as a divisor, which allow remote attackers to cause a denial of service divide-by-zero error and crash via a zero value...
CVE-2008-5247
CVE-2008-5247 affects xine-lib 1.1.12 and earlier (up to 1.1.15): the function real_parse_audio_specific_data uses an untrusted height (codec_data_length) as a divisor, allowing a remote attacker to trigger a divide-by-zero error and crash. Mitigation: upgrade to xine-lib 1.1.16.3 or later as per...
CVE-2007-5247
CVE-2007-5247 describes multiple format-string vulnerabilities in the Lithtech-based engine as used by F.E.A.R. 1.08 and earlier, with PunkBuster enabled. The issue allows remote attackers to potentially execute arbitrary code or cause a denial of service via format specifiers in specific PunkBus...
CVE-2006-5247
CVE-2006-5247 concerns multiple cross-site scripting (XSS) vulnerabilities in Eazy Cart. The affected component is the web application’s easycart.php, with possible vectors including the (1) des and (2) qty parameters in an add action and other unspecified vectors. The description and connected s...