Debian Security Advisory DSA 3692-1 (freeimage - security update)

Multiple vulnerabilities were discovered in the FreeImage multimedia library, which might result in denial of service or the execution of arbitrary code if a malformed XMP or RAW image is processed. OpenVAS Vulnerability Test $Id: deb3692.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated...

[SECURITY] [DLA DLA-647-1] freeimage security update

Package : freeimage Version : 3.15.1-1.1+deb7u1 CVE ID : CVE-2016-5684 Debian Bug : 839827 It was discovered that there was an out-of-bounds write vulnerability in the XMP image handling functionality in freeimage, a support library for various graphics image formats. A specially crafted XMP file...

Lenovo Service Engine (LSE) BIOS for Notebook - Lenovo Support US

No description provided...

CVE-2014-5684

The CVE-2014-5684 entry concerns the Runtastic Running & Fitness Android app (com.runtastic.android) version 5.1.2, which does not verify X.509 certificates when establishing SSL connections. This behavior enables man-in-the-middle attackers to spoof servers and obtain sensitive data via a crafte...

CVE-2014-5684

The Runtastic Running & Fitness aka com.runtastic.android application 5.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2012-5684

CVE-2012-5684 is an XSS vulnerability in ZPanel 10.0.1 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the inFullname parameter in the UpdateAccountSettings action in the my_account module (targeting zpanel/). This is part of a broader set of issues report...

CVE-2012-5684

Cross-site scripting XSS vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the inFullname parameter in an UpdateAccountSettings action in the myaccount module to zpanel/...

ZPanel <= 10.0.1 CSRF, XSS, SQLi, Password Reset

No description provided by source. Exploit Title: ZPanel = 10.0.1 CSRF, XSS, SQLi, Password Reset Date: 04/11/2012 Exploit Author: pcsjj Vendor Homepage: http://www.zpanelcp.com/ Version: 10.0.1 Software Link: http://sourceforge.net/projects/zpanelcp/files/latest/download Downloads: 90,382 CVE :...

Fedora Update for mediawiki FEDORA-2014-5684

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-5684

creationtimestamp| type| source ---|---|--- 2012-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22490...

ZPanel <= 10.0.1 CSRF/XSS/SQLi/Password Reset

Exploit for multiple platform in category web applications Exploit Title: ZPanel = 10.0.1 CSRF, XSS, SQLi, Password Reset Date: 04/11/2012 Exploit Author: pcsjj Vendor Homepage: http://www.zpanelcp.com/ Version: 10.0.1 Software Link: http://sourceforge.net/projects/zpanelcp/files/latest/download...

CVE-2008-5684

CVE-2008-5684 affects Sun Solaris 8–10 and OpenSolaris before snv_85 due to a libICE issue; allows context-dependent denial of service, shown by a port-scan-triggered segmentation fault in gnome-session. Connected docs reference Xsun/X11 patches for Solaris 10, but explicit libICE remediation det...

openSUSE 10 Security Update : tomcat5 (tomcat5-5684)

This update of tomcat fixes an information leak due to incorrect IP address filtering. CVE-2008-3271 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tomcat5-5684. The text description of this...

CVE-2007-5684

CVE-2007-5684 affects TikiWiki versions up to 1.9.8.1 (and earlier) with directory traversal/local file inclusion vulnerabilities. The issues arise in parameters error_handler_file, local_php (tiki-index.php) and imp_language (tiki-imexport_languages.php), allowing remote inclusion and potential ...

Solaris 8 (sparc) : 119067-11

X11 6.4.1: Xsun patch. Date this patch was last updated by Sun : Dec/11/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid2341...

Solaris 9 (sparc) : 112785-65

X11 6.6.1: Xsun patch. Date this patch was last updated by Sun : Dec/11/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1436...

Solaris 9 (x86) : 112786-54

X11 6.6.1x86: Xsun patch. Date this patch was last updated by Sun : Dec/11/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...