OESA-2024-1723 libndp security update

This package contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages. Security Fixes: A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in...

CVE-2024-5564

CVE-2024-5564 affects libndp, a library used by NetworkManager to handle IPv6 Neighbor Discovery. The issue is a buffer overflow triggered by a malformed IPv6 router advertisement due to improper validation of route length information, allowing a local attacker with user privileges to exploit the...

CVE-2024-5564

A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information. Mitigation Current...

Debian DSA-5564-1 : gimp - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5564 advisory. Michael Randrianantenaina reported several vulnerabilities in GIMP, the GNU Image Manipulation Program, which could result in denial of service application...

CVE-2023-5564

CVE-2023-5564 describes a stored cross-site scripting (XSS) vulnerability in Froxlor/Froxlor prior to version 2.1.0-dev1. The issue arises from storing unvalidated user input, enabling script injection that could impact affected users. Multiple connected sources corroborate the store-time XSS in ...

CVE-2023-5564 Cross-site Scripting (XSS) - Stored in froxlor/froxlor

Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.1.0-dev1...

Ubuntu 22.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-5564-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5564-1 advisory. Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter...

Oracle Linux 8 : kernel (ELSA-2022-5564)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5564 advisory. - debug: lockdown kgdb Orabug: 34270802 CVE-2022-21499 - perf: Fix sysperfeventopen race against self Michael Petlan 2087948 2087949 CVE-2022-1729 Tenable has...

Rocky Linux 8 : kernel (RLSA-2022:5564)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5564 advisory. - kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 Note that Nessus has not tested for this issue but has instead relied only ...

RHEL 8 : kernel (RHSA-2022:5564)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5564 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: race condition in perfeventopen leads t...

RHEL 8 : firefox (RHSA-2020:5564)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5564 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CVE-2020-5564

CVE-2020-5564 affects Cybozu Garoon (v4.0.0–4.10.3). It is a cross-site scripting vulnerability in the E-mail component that allows a remote attacker to inject arbitrary web script or HTML via the E-mail application. The issue is caused by improper handling of input in the E-mail feature, enablin...

JVN#35649781: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Authentication bypass in the API used to specify the fields CWE-287 - CVE-2020-5563 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N| Base Score: 5.3 CVSS v2|...

CVE-2019-5564

...

CVE-2019-5564

CVE-2019-5564 is rejected and not used; this candidate does not represent an active vulnerability entry.

CVE-2016-5564

CVE-2016-5564 concerns an unspecified vulnerability in Oracle Hospitality OPERA 5 Property Services within Oracle Hospitality Applications versions 5.4.0.0–5.4.3.0, 5.5.0.0, and 5.5.1.0. The vulnerability affects the OPERA component and allows remote authenticated users to impact confidentiality,...

Google Chrome < 44.0.2403.155 Multiple Vulnerabilities (Mac OS X)

The version of Google Chrome installed on the remote Mac OS X host is prior to 44.0.2403.155. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-556...

Google Chrome < 44.0.2403.155 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 44.0.2403.155. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562...

UBUNTU-CVE-2015-5564

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vector...

CVE-2015-5564

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vector...