81 matches found
Moderate: Red Hat Security Advisory: mariadb security and bug fix update
An update for mariadb is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
openSUSE Security Update : mysql-community-server (openSUSE-2017-555) (Riddle)
This update for mysql-community-server to version 5.6.36 fixes the following issues : These security issues were fixed : - CVE-2016-5483: Mysqldump failed to properly quote certain identifiers in SQL statements written to the dump output, allowing for execution of arbitrary commands bsc1029014 -...
openSUSE: Security Advisory for mysql-community-server (openSUSE-SU-2017:1209-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for mysql-community-server (important)
This update for mysql-community-server to version 5.6.36 fixes the following issues: These security issues were fixed: - CVE-2016-5483: Mysqldump failed to properly quote certain identifiers in SQL statements written to the dump output, allowing for execution of arbitrary commands bsc1029014 -...
[SECURITY] [DLA 916-1] mysql-5.5 security update
Package : mysql-5.5 Version : 5.5.55-0+deb7u1 CVE ID : CVE-2016-5483 CVE-2017-3302 CVE-2017-3305 CVE-2017-3308 CVE-2017-3309 CVE-2017-3329 CVE-2017-3453 CVE-2017-3456 CVE-2017-3461 CVE-2017-3462 CVE-2017-3463 CVE-2017-3464 CVE-2017-3600 Debian Bug : 854713 860544 Several issues have been discover...
CVE-2016-5483
CVE-2016-5483 concerns MySQL 5.5 (mysql/mysqldump) where newline characters in database/table names were not handled safely. A privileged user could cause a restoration of a mysqldump backup to execute arbitrary shell or SQL commands. Remediation: upgrade to upstream MySQL 5.5.55 (as in Debian DS...
SUSE SLES11 Security Update : tcpdump (SUSE-SU-2017:0656-1)
This update for tcpdump fixes the following issues: Security issues fixed bsc1020940 : - CVE-2016-7922: Corrected buffer overflow in AH parser print-ah.c:ahprint. - CVE-2016-7923: Corrected buffer overflow in ARP parser print-arp.c:arpprint. - CVE-2016-7925: Corrected buffer overflow in compresse...
CVE-2016-5483: use mysqldump to backup can generate Backdoor-vulnerability warning-the black bar safety net
mysqldump is used to create a MySQL database, logical backup is a commonly used tool. It is in the default configuration, you can generate one. sql file containing the create/delete tables and insert data. In import the dump file, an attacker may be manufactured by a malicious table name to...
CVE-2017-5483
tcpdump is vulnerable to CVE-2017-5483: a buffer overflow in the SNMP parser (print-snmp.c:asn1_parse()) could allow remote code execution. Affected: tcpdump before 4.9.0. Remediation: upgrade to tcpdump 4.9.0 or later (as noted in multiple advisories; upgrade is the advised fix).
CVE-2017-5483
The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...
UBUNTU-CVE-2017-5483
The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...
WordPress Private Only 3.5.1 CSRF / Cross Site Scripting Vulnerabilities
Exploit for php platform in category web applications Details ================ Software: Private Only Version: 3.5.1 Homepage: http://wordpress.org/plugins/private-only/ Advisory report:...
WordPress Private Only 3.5.1 CSRF / Cross Site Scripting
Details ================ Software: Private Only Version: 3.5.1 Homepage: http://wordpress.org/plugins/private-only/ Advisory report: https://security.dxw.com/advisories/csrfxss-vulnerability-in-private-only-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can/ CVE: CVE-2015-5483 CVSS:...
CVE-2013-5483
Cisco SocialMiner contains an XSS vulnerability in bookmarklet.jsp (CVE-2013-5483). An unauthenticated, remote attacker could trick a user into following a malicious link or visit a crafted site, injecting arbitrary script/HTML via input validation weaknesses. Impact per advisories includes user-...
Fedora 17 : openstack-keystone-2012.1.3-3.fc17 (2012-19341)
EC2-style credentials invalidation issue CVE-2012-5571 - Fix /etc/keystone directory permission CVE-2012-5483 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...
Fedora Update for openstack-keystone FEDORA-2012-19341
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Moderate: Red Hat Security Advisory: openstack-keystone security, bug fix, and enhancement update
Updated openstack-keystone packages that fix two security issues, multiple bugs, and add enhancements are now available for Red Hat OpenStack Essex. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...
CVE-2007-5483
IBM WebSphere Application Server 6.0.x prior to Fix Pack 23 is affected by an unspecified vulnerability in the Administrative Scripting Tools (wsadmin/ANT). The NASL entry explicitly identifies this version range and tool, but provides no technical details on root cause, impact, or exploit vector...