Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20170125)

This update upgrades Firefox to version 45.7.0 ESR. Security Fixes : - Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

[SECURITY] [DSA 3771-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3771-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 25, 2017 https://www.debian.org/security/faq -...

CVE-2016-5383

The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."...

CVE-2016-5383

The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."...

CVE-2016-5383

The CVE-2016-5383 issue affects Red Hat CloudForms Management Engine (CFME) 4.1, where the web UI did not properly filter input in certain fields, allowing remote authenticated attackers to execute arbitrary code on the host. Root cause: insufficient input filtering (listed as “Lack of field filt...

Important: Red Hat Security Advisory: CFME 5.6.1 security, bug fix, and enhancement update

An update for cfme is now available for Red Hat CloudForms 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CVE-2014-5383

SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-5383

CVE-2014-5383 concerns an SQL injection in AlienVault OSSIM. Connected data confirms the vulnerability affects AlienVault OSSIM 4.6.1 and earlier (pre-4.7.0), with an authenticated attacker able to execute arbitrary SQL via unspecified vectors. A Metasploit module documents exploitation against n...

Design/Logic Flaw

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors, a different vulnerability than CVE-2013-5383...

CVE-2013-5383

CVE-2013-5383 affects IBM Maximo Asset Management and related products (7.5, 7.1, 6.2 families; including Essentials and various industry solutions) with remote authenticated privilege escalation via unspecified vectors. The IBM Security Flash (Sept 2013) enumerates affected releases and provides...

CVE-2012-5383

creationtimestamp| type| source ---|---|--- 2013-09-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28130...

CVE-2012-5383

CVE-2012-5383 describes an untrusted search path vulnerability in Oracle MySQL 5.5.28 when installed in the top-level C:\ directory. A Trojan horse DLL (wlbsctrl.dll) in C:\MySQL\MySQL Server 5.5\bin could be added to the PATH by an administrator and loaded by the IKE and AuthIP IPsec Keying Modu...

Microsoft SQL Server Native Auditing Accessed

Binary data 5383.prm...

CVE-2008-5383

CVE-2008-5383 affects National Instruments Electronics Workbench through a stack-based buffer overflow in the application when processing a crafted .ewb file. The vulnerability enables user-assisted attackers to cause a denial of service (application crash) and may allow arbitrary code execution....

CVE-2008-5383

creationtimestamp| type| source ---|---|--- 2008-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7307...

CVE-2007-5383

The CVE-2007-5383 entry concerns Thomson/Alcatel SpeedTouch 7G routers (as used with BT Home Hub 6.2.6.B and earlier). The vulnerability allows remote attackers on an intranet to bypass authentication and gain administrative access by manipulating the PATH_INFO end character (notably a trailing s...

CVE-2006-5383

SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter...

CVE-2006-5383

The CVE-2006-5383 entry describes an SQL injection in Def-Blog 1.0.1 and earlier, exploitable via the article parameter in comadd.php. Affected software is Def-Blog (version 1.0.1 and earlier). Root cause: improper handling of user-supplied input in the article parameter leading to SQL command ex...