openSUSE Security Update : tiff (openSUSE-2018-31)

This update for tiff to version 4.0.9 fixes the following issues : Security issues fixed : - CVE-2014-8128: Fix out-of-bounds read with malformed TIFF image in multiple tools bsc969783. - CVE-2015-7554: Fix invalid write in tiffsplit / TIFFVGetField bsc960341. - CVE-2016-10095: Fix stack-based...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:0073-1)

This update for tiff to version 4.0.9 fixes the following issues: Security issues fixed : - CVE-2014-8128: Fix out-of-bounds read with malformed TIFF image in multiple tools bsc969783. - CVE-2015-7554: Fix invalid write in tiffsplit / TIFFVGetField bsc960341. - CVE-2016-10095: Fix stack-based...

SUSE-SU-2018:0073-1 Security update for tiff

This update for tiff to version 4.0.9 fixes the following issues: Security issues fixed: - CVE-2014-8128: Fix out-of-bounds read with malformed TIFF image in multiple tools bsc969783. - CVE-2015-7554: Fix invalid write in tiffsplit / TIFFVGetField bsc960341. - CVE-2016-10095: Fix stack-based buff...

Debian: Security Advisory (DLA-693-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] libtiff

New libtiff packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libtiff-4.0.9-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more information, see:...

CVE-2016-5318

CVE-2016-5318 targets LibTIFF with a stack-based buffer overflow in the _TIFFVGetField function (libtiff 4.0.6 and earlier). This remote-triggered flaw could crash the application and, in some advisories, may allow arbitrary code execution. Public documentation across Debian, Arch Linux, Gentoo, ...

CVE-2016-5318

Stack-based buffer overflow in the TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff...

[SECURITY] [DLA 693-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u7 CVE ID : CVE-2014-8128 CVE-2015-7554 CVE-2015-8668 CVE-2016-3186 CVE-2016-3619 CVE-2016-3620 CVE-2016-3621 CVE-2016-3631 CVE-2016-3632 CVE-2016-3633 CVE-2016-3634 CVE-2016-5102 CVE-2016-5318 CVE-2016-5319 CVE-2016-5652 CVE-2016-6223 CVE-2016-8331 Debian Bug...

Fedora 22 : jenkins-1.609.3-3.fc22 / jenkins-remoting-2.53-1.fc22 (2015-a433d8ba72)

Fix CVE-2015-5318, CVE-2015-5320, CVE-2015-5325, SECURITY-218 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 23 : jenkins-1.625.2-2.fc23 / jenkins-remoting-2.53-1.fc23 (2015-d02feebd15)

Update to 1.625.2 - Resolves: CVE-2015-5317, CVE-2015-5318, CVE-2015-5319, CVE-2015-5320, CVE-2015-5324, CVE-2015-5321, CVE-2015-5322, CVE-2015-5323, CVE-2015-5325, CVE-2015-5326, SECURITY-218 Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...

CVE-2015-5318

CVE-2015-5318 affects Jenkins core prior to 1.638 and LTS prior to 1.625.2. The vulnerability arises because a publicly accessible salt is used to generate CSRF protection tokens, making it easier for remote attackers to brute-force and bypass CSRF protection. The practical impact is the potentia...

CVE-2011-5318

CVE-2011-5318 affects diafan.CMS prior to 5.1, with multiple CSRF flaws that could hijack administrator sessions for POSTs to admin/news/saveNEWS_ID/, admin/site/save2/, or admin/usersite/save2/. The connected Red Hat and NVD entries confirm the same description. Root cause: cross-site request fo...

CVE-2014-5318

The jigbrowser+ application 1.8.1 and earlier for iOS allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code...

CVE-2014-5318

The CVE-2014-5318 issue affects jigbrowser+ for iOS (versions 1.8.1 and earlier). A flaw in how the app loads web pages allows remote attackers to bypass the Same Origin Policy by injecting crafted JavaScript, enabling access to data across different domains. Affected component: the iOS web loadi...

CVE-2013-5318

Ginkgo CMS 5.0 is affected by an SQL Injection vulnerability in the rang parameter of index.php. Root cause is unsafe handling of user-supplied rang input, enabling remote attackers to craft SQL commands. Documented in multiple sources (CVE-2013-5318, DSquare E-353). Impact is potential arbitrary...

CVE-2013-5318

creationtimestamp| type| source ---|---|--- 2013-08-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27274...

CVE-2012-5318

The CVE-2012-5318 entry is confirmed with concrete details: it affects the Kish Guest Posting WordPress plugin (version 1.2) via an Unrestricted file upload in uploadify/scripts/uploadify.php. The vulnerability allows remote attackers to execute arbitrary code by uploading a file with a double ex...

Netscreen-14 VPN Detection

Binary data 5318.prm...

CVE-2008-5318

CVE-2008-5318 affects Tiki Wiki CMS Groupware prior to 2.2; the issue is described as an input sanitation weakness related to the size of user-provided input. Exploitation details and exact impact are not provided in the CVE description, but a public NES/OPENVAS entry classifies it as an input sa...

CVE-2007-5318

TYPOlight webCMS 2.4.6 is affected by an unspecified vulnerability in preview.php that allows remote attackers to download arbitrary files via the src parameter. This entry reports a file-download capability without details on root cause or affected environments beyond TYPOlight 2.4.6, and does n...