CVE-2020-5297

The CVE-2020-5297 issue affects OctoberCMS (october/october composer package) versions 1.0.319–1.0.465, where an authenticated backend user with cms.manage_assets can upload many file types (images, CSS/JS, fonts, JSON, etc.) to any directory on the server. The root cause is an unrestricted file ...

Huawei EulerOS: Security Advisory for pixman (EulerOS-SA-2020-1422)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : pixman (EulerOS-SA-2020-1422)

According to the version of the pixman packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow issue has been reported in the generalcompositerect function in pixman prior to version 0.32.8. An attacker could exploit this...

Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2016-1085)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : pixman (EulerOS-SA-2019-2487)

According to the version of the pixman packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow issue has been reported in the generalcompositerect function in pixman prior to version 0.32.8. An attacker could exploit this...

CVE-2015-5297

creationtimestamp| type| source ---|---|--- 2019-08-01 02:32:21+00:00| seen| https://t.me/cibsecurity/5852 2019-08-07 18:35:08+00:00| seen| https://t.me/cibsecurity/5979...

CVE-2015-5297

An integer overflow issue has been reported in the generalcompositerect function in pixman prior to version 0.32.8. An attacker could exploit this issue to cause an application using pixman to crash or, potentially, execute arbitrary code...

CVE-2015-5297

An integer overflow issue has been reported in the generalcompositerect function in pixman prior to version 0.32.8. An attacker could exploit this issue to cause an application using pixman to crash or, potentially, execute arbitrary code...

CVE-2015-5297

CVE-2015-5297 concerns pixman: an integer overflow in the general_composite_rect() function affects pixman versions prior to 0.32.8. An attacker could cause a crash or possibly execute arbitrary code in applications using pixman. The documented remediation is to upgrade to version 0.32.8 or newer...

CVE-2019-5297

CVE-2019-5297 describes a Factory Reset Protection (FRP) bypass vulnerability affecting Huawei smartphones running versions earlier than 9.0.0.159. The issue allows bypass of FRP during the reset process before account verification/activation, enabling misuse of the device. The vulnerability is a...

CVE-2019-5297

Emily-L29C Huawei phones versions earlier than 9.0.0.159 C185E2R1P12T8 have a Factory Reset Protection FRP bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obta...

Ubuntu: Security Advisory (USN-3843-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1587-1 : pixman security update

CVE-2015-5297 Numerical overflow in pointer arithmetic. For Debian 8 'Jessie', this problem has been fixed in version 0.32.6-3+deb8u1. We recommend that you upgrade your pixman packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security...

CVE-2016-5297

An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...

CVE-2016-5297

CVE-2016-5297 is an argument length checking error in JavaScript that can trigger integer overflows, affecting Mozilla Thunderbird <45.5, Firefox ESR <45.5, and Firefox

SUSE SLES11 Security Update : MozillaFirefox, mozilla-nss (SUSE-SU-2016:3105-1)

This update for MozillaFirefox, mozilla-nss fixes security issues and bugs. The following vulnerabilities were fixed in Firefox ESR 45.5.1 bsc1009026 : - CVE-2016-9079: Use-after-free in SVG Animation bsc1012964 MFSA 2016-92 - CVE-2016-5297: Incorrect argument length checking in JavaScript...

SUSE-SU-2016:3105-1 Security update for MozillaFirefox, mozilla-nss

This update for MozillaFirefox, mozilla-nss fixes security issues and bugs. The following vulnerabilities were fixed in Firefox ESR 45.5.1 bsc1009026: - CVE-2016-9079: Use-after-free in SVG Animation bsc1012964 MFSA 2016-92 - CVE-2016-5297: Incorrect argument length checking in Javascript...

SUSE SLES11 Security Update : MozillaFirefox, mozilla-nss (SUSE-SU-2016:3080-1)

This update for MozillaFirefox, mozilla-nss fixes security issues and bugs. The following vulnerabilities were fixed in Firefox ESR 45.5.1 bsc1009026 bsc1012964 : - CVE-2016-9079: Use-after-free in SVG Animation MFSA 2016-92 bsc1012964 - CVE-2016-5297: Incorrect argument length checking in...

[SECURITY] [DSA 3730-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3730-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 11, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3730-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3730-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 11, 2016 https://www.debian.org/security/faq -...