openSUSE Security Update : jasper (openSUSE-2020-1523)

This update for jasper fixes the following issues : - CVE-2016-9398: Improved patch for already fixed issue bsc1010979. - CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. - CVE-2017-5499: Validate component depth bit bsc1020451. - CVE-2017-5503: Check bounds in jasseq2dbindsub bsc1020456. -...

openSUSE: Security Advisory for jasper (openSUSE-SU-2020:1523-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for jasper (moderate)

openSUSE Security Update: Security update for jasper Announcement ID: openSUSE-SU-2020:1523-1 Rating: moderate References: 1010979 1010980 1020451 1020456 1020458 1020460 1045450 1057152 1088278 1114498 1115637 1117328 1120805 1120807 Cross-References: CVE-2016-9398 CVE-2016-9399 CVE-2017-14132...

openSUSE: Security Advisory for jasper (openSUSE-SU-2020:1517-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

FreeBSD : jasper -- multiple vulnerabilities (6842ac7e-d250-11ea-b9b7-08002728f74c)

JasPer NEWS : - Fix CVE-2018-9154 - Fix CVE-2018-19541 - Fix CVE-2016-9399, CVE-2017-13751 - Fix CVE-2018-19540 - Fix CVE-2018-9055 - Fix CVE-2017-13748 - Fix CVE-2017-5503, CVE-2017-5504, CVE-2017-5505 - Fix CVE-2018-9252 - Fix CVE-2018-19139 - Fix CVE-2018-19543, CVE-2017-9782 - Fix...

jasper -- multiple vulnerabilities

JasPer NEWS: - Fix CVE-2018-9154 - Fix CVE-2018-19541 - Fix CVE-2016-9399, CVE-2017-13751 - Fix CVE-2018-19540 - Fix CVE-2018-9055 - Fix CVE-2017-13748 - Fix CVE-2017-5503, CVE-2017-5504, CVE-2017-5505 - Fix CVE-2018-9252 - Fix CVE-2018-19139 - Fix CVE-2018-19543, CVE-2017-9782 - Fix CVE-2018-205...

CVE-2020-5505

Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring in conjunction with "type":"application/x-php" to the /api/files/ URI...

CVE-2020-5505

CVE-2020-5505 affects Freelancy v1.0.0, enabling remote command execution via a crafted request to /api/files/ that injects a data:application/x-php;base64 substring in conjunction with

Freelancy 1.0.0 Remote Code Execution

Exploit Title: Freelancy - Freelance Management App v1.0.0 - RCE Authenticated Arbitrary File Download Date: 03-01-2019 Exploit Author: Ismail Tasdelen Vendor Homepage: https://vaaip.com/ Software Link: https://codecanyon.net/item/freelancy-freelance-project-management-application/25288636...

CVE-2019-5505

ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext...

CVE-2019-5505

ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext...

CVE-2019-5505

The CVE-2019-5505 issue affects NetApp ONTAP Select Deploy admin utility versions 2.2–2.12.1, where credentials are transmitted in plaintext. The combined documents identify the root cause as unencrypted credential handling in the deploy utility, leading to potential credential disclosure. The vu...

BEWARD Intercom 2.3.1 - Credentials Disclosure Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python -- coding: utf8 -- BEWARD Intercom 2.3.1 Credentials Disclosure Vendor: Beward R&D Co., Ltd Product web page: https://www.beward.net Affected version: 2.3.1.34471 2.3.0 2.2.11 2.2.10.5 2.2.9 2.2.8.9 2.2.7.4 Note: For...

CVE-2018-5505

CVE-2018-5505 affects F5 BIG-IP when ASM and AVR (Analytics) modules are provisioned and the DNS profile with Protocol TCP is used. On BIG-IP 13.1.0–13.1.0.3, TMM may restart while processing DNS requests, potentially enabling remote Denial of Service. The advisory notes AVR is automatically enab...

PT-2017-5202 · Cisco · Asa 5540 +10

Name of the Vulnerable Software and Affected Versions: ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance ASA Software versions 9.4.x through 9.4.0, 9.2.x through 9.2.3, 8.4.x through 8.4.6, 8.2.x through 8.2.4 ASA 5510 Adaptive Security Appliance Adaptive Security Appliance ASA...

CVE-2017-5505

The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

CVE-2017-5505

CVE-2017-5505 (and related Jasper/JasPer flaws) is documented across multiple open-source and vendor advisories as affecting JasPer up to version 1.900.27 (and related 2.x branches). The core issue cited is an invalid memory read/write and crash via crafted images in jas_matrix_asl (jas_seq.c) an...

CVE-2016-5505

CVE-2016-5505 affects Oracle Database Server (RDBMS Programmable Interface) in versions 11.2.0.4 and 12.1.0.2. The vulnerability is local and allows an attacker to affect confidentiality via unknown vectors; the CVSSv3 base score is 5.5 (Medium) with local access, low attack complexity, and no us...

Oracle Database Multiple Vulnerabilities (October 2016 CPU)

The remote Oracle Database Server is missing the October 2016 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the RDBMS Security and SQLPlus component that allows an authenticated, remote attacker to disclose sensitive informatio...

cplusplus.com XSS vulnerability

Vulnerable URL: http://www.cplusplus.com/info/delete.cgi?" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5505 Google Pagerank| 6 VIP website status:| Yes Check cplusplus.com SSL...