Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2019-1857)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-5360

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5360

HPE Intelligent Management Center (IMC) PLAT versions earlier than 7.3 E0506P09 are affected by a remote code execution via perfAddorModDeviceMonitor Expression Language Injection. The flaw is in handling of the beanName parameter, enabling arbitrary code execution in the context of SYSTEM; accor...

Security fix for the ALT Linux 10 package libtiff version 4.0.10.0.57.f9fc01c3-alt1

April 9, 2019 Vladimir D. Seleznev 4.0.10.0.57.f9fc01c3-alt1 - Updated to v4.0.10-57-gf9fc01c3 ALT 36575, 34677. - Applied SUSE patches: + tiff-4.0.3-seek.patch; + tiff-4.0.3-compress-warning.patch; + tiff-CVE-2018-12900.patch. - Built with support of: + libjbig; + libwebp; + libzstd. - Fixes: +...

CVE-2012-5360

CVE-2012-5360 affects Libavcodec in FFmpeg prior to 0.11. The vulnerability allows remote code execution through a crafted QT file due to a memory/parse issue in libavcodec. Impact is remote code execution with high severity over network; requires no privileges but user interaction is not require...

CVE-2018-5360

CVE-2018-5360 : LibTIFF before 4.0.6 has a heap-based buffer over-read in ReadTIFFImage (GraphicsMagick 1.3.27). Affects the TIFF handling path of LibTIFF; details in the GraphicsMagick/TIFF code path show the root cause. The public descriptions reference GraphicsMagick 1.3.27 and a heap-based ov...

Fedora 24 : haproxy (2016-b38938aa8e)

Security fix for CVE-2016-5360 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

CVE-2016-5360

HAproxy 1.6.x before 1.6.6, when a deny comes from a reqdeny rule, allows remote attackers to cause a denial of service uninitialized memory access and crash or possibly have unspecified other impact via unknown vectors...

CVE-2016-5360

HAProxy 1.6.x is affected when a deny comes from a reqdeny rule. The underlying issue can cause uninitialized memory access and a crash, enabling remote DoS or other unspecified impact. A fix is available in 1.6.6 and newer; remediation is to upgrade to haproxy 1.6.6 or later (or apply vendor-sup...

CVE-2015-5360

Juniper Junos IPv6 SEND handling DoS (CVE-2015-5360) affects Junos with SEND security-level default enabled. A remote attacker can craft SEND Protocol packets to trigger CPU exhaustion, impacting CLI responsiveness and IPv6 packet processing. Exploitation details are described in multiple sources...

Juniper Networks Junos OS IPv6 sendd DoS Vulnerability

Junos OS is prone to a Denial of Service vulnerability in the SEND daemon. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LANDesk Management Suite AMTVersion Cross-Site Scripting (CVE-2014-5360)

A cross-site scripting vulnerability exists in LANDesk Management Suite. The vulnerability is due to improper validation of a user-supplied parameter AMTVersion. A remote attacker could exploit this vulnerability by enticing a target user to view crafted web content...

CVE-2014-5360 Landesk Management Suite XSS (Cross-Site Scripting) Security Vulnerability

Exploit Title: Landesk Management Suite Cross-Site scripting vulnerabilityProduct: Landesk Management Suite Vulnerable Versions: 9.5 possible previous versions, 9.6 Tested Version: 9.5 Advisory Publication: Feb 02, 2015 Vulnerability Type: Cross-Site Scripting CWE-79 CVE Reference: CVE-2014-5360...

Landesk Management Suite 9.5 Cross Site Scripting Vulnerability

Landesk Management Suite version 9.5 suffers from a cross site scripting vulnerability Exploit Title: Landesk Management Suite Cross-Site scripting vulnerability Product: Landesk Management Suite Vulnerable Versions: 9.5 possible previous versions, 9.6 Tested Version: 9.5 Advisory Publication: Fe...

CVE-2014-5360

Cross-site scripting XSS vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remote attackers to inject arbitrary web script or HTML via the AMTVersion parameter to remote/serverlistgrouptree.aspx...

CVE-2014-5360

CVE-2014-5360 is a cross-site scripting (XSS) vulnerability in the admin interface of LANDESK Management Suite, exploitable via the AMTVersion parameter to remote/serverlist_grouptree.aspx on affected versions before 9.6 SP1. Exploitation could inject arbitrary script/HTML, potentially compromisi...

Landesk Management Suite 9.5 Cross Site Scripting

CVE-2014-5360 Landesk Management Suite XSS Cross-Site Scripting Security Vulnerability Exploit Title: Landesk Management Suite Cross-Site scripting vulnerability Product: Landesk Management Suite Vulnerable Versions: 9.5 possible previous versions, 9.6 Tested Version: 9.5 Advisory Publication: Fe...

BlueCom 5360/52018 Password Reset

Exploit Title: BLUE COM Router - 5360/52018 Password Reset Exploit Date: 20/1/2013 Exploit Author: KAI kaisai12 Home: CEH.VN Version: BCOM - 5360 vulnerability - change password easy ! no protect ! var loc = 'password.cgi?'; switch idx case 2: loc += 'sptPassword=' + encodeUrlpwdNew.value; break;...

BLUE COM Router 5360/52018 - Password Reset Exploit

BlueCom router model 5360/52018 remote password reset exploit. Exploit Title: BLUE COM Router - 5360/52018 Password Reset Exploit Date: 20/1/2013 Exploit Author: KAI kaisai12 Home: CEH.VN Version: BCOM - 5360 vulnerability - change password easy ! no protect ! var loc = 'password.cgi?'; switch id...

VMSA-2009-0014 : VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues

a. Service Console update for DHCP and third-party library update for DHCP client. DHCP is an Internet-standard protocol by which a computer can be connected to a local network, ask to be given configuration information, and receive from a server enough information to configure itself as a member...