104 matches found
Mageia: Security Advisory (MGASA-2015-0391)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated php-ZendFramework/php-ZendFramework2 packages fixe security vulnerabilities
Zend Framework contained several instances where it was using incorrect permissions masks, which could lead to local privilege escalation issues CVE-2015-5723. The PDO adapters of Zend Framework 1 do not filter null bytes values in SQL statements. A PDO adapter can treat null bytes in a query as ...
Debian DSA-3369-1 : zendframework - security update
Multiple vulnerabilities were discovered in Zend Framework, a PHP framework : - CVE-2015-5723 It was discovered that due to incorrect permissions masks when creating directories, local attackers could potentially execute arbitrary code or escalate privileges. - ZF2015-08 no CVE assigned Chris...
Fedora Update for php-doctrine-cache FEDORA-2015-15198
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-doctrine-doctrine-bundle FEDORA-2015-15206
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-doctrine-cache FEDORA-2015-15199
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-doctrine-annotations FEDORA-2015-15203
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 3369-1] zendframework security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3369-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini October 06, 2015 https://www.debian.org/security/faq -...
Fedora 23 : php-doctrine-doctrine-bundle-1.5.2-1.fc23 (2015-15205)
1.5.2 2015-08-31 Security: Fix Security Misconfiguration Vulnerability, allowing potential local arbitrary code execution CVE-2015-5723 http://www.doctrine-project.org/2015/08/31/securitymisconfi gurationvulnerabilityinvariousdoctrineprojects.html 1.5.1 2015-08-12 Bugfix: Fixed the JS expanding a...
Fedora 23 : php-doctrine-annotations-1.2.7-1.fc23 (2015-15202)
CVE-2015-5723 http://www.doctrine-project.org/2015/08/31/securitymisconfigurat ionvulnerabilityinvariousdoctrineprojects.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...
Fedora 22 : php-doctrine-doctrine-bundle-1.5.2-1.fc22 (2015-15206)
1.5.2 2015-08-31 Security: Fix Security Misconfiguration Vulnerability, allowing potential local arbitrary code execution CVE-2015-5723 http://www.doctrine-project.org/2015/08/31/securitymisconfi gurationvulnerabilityinvariousdoctrineprojects.html 1.5.1 2015-08-12 Bugfix: Fixed the JS expanding a...
Fedora 22 : php-doctrine-cache-1.4.2-1.fc22 (2015-15199)
CVE-2015-5723 http://www.doctrine-project.org/2015/08/31/securitymisconfigurat ionvulnerabilityinvariousdoctrineprojects.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...
Fedora 21 : php-doctrine-cache-1.4.2-1.fc21 (2015-15198)
CVE-2015-5723 http://www.doctrine-project.org/2015/08/31/securitymisconfigurat ionvulnerabilityinvariousdoctrineprojects.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...
Fedora 21 : php-doctrine-annotations-1.2.7-1.fc21 (2015-15201)
CVE-2015-5723 http://www.doctrine-project.org/2015/08/31/securitymisconfigurat ionvulnerabilityinvariousdoctrineprojects.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...
Fedora 22 : php-doctrine-annotations-1.2.7-1.fc22 (2015-15203)
CVE-2015-5723 http://www.doctrine-project.org/2015/08/31/securitymisconfigurat ionvulnerabilityinvariousdoctrineprojects.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...
Security Misconfiguration Vulnerability in the AWS SDK for PHP
SECURITY FIX: This release addresses a security issue associated with CVE-2015-5723, specifically, fixes improper default directory umask behavior that could potentially allow unauthorized modifications of PHP code. Thanks to @ryan-lane for the initial report. - Aws\Ec2 - Added support for...
Security Misconfiguration Vulnerability in the AWS SDK for PHP
SECURITY FIX: This release addresses a security issue associated with CVE-2015-5723, specifically, fixes improper default directory umask behavior that could potentially allow unauthorized modifications of PHP code. Thanks to @ryan-lane for the initial report. Aws\Ec2 - Added support for...
CVE-2012-5723
Cisco ASR 1000 devices running software before 3.8S are affected when BDI routing is enabled. The issue allows remote attackers to trigger a denial of service (device reload) by sending crafted ICMP packets (broadcast or multicast) with fragmentation. This is associated with Bug ID CSCub55948. Th...
CVE-2013-5723
CVE-2013-5723 describes a SQL injection in SAP NetWeaver 7.30. The vulnerability affects SAP NetWeaver 7.30, where an attacker can remotely execute arbitrary SQL commands via an unspecified vector related to ABAD0_DELETE_DERIVATION_TABLE. The provided documents do not specify a concrete vulnerabl...
CVE-2008-5723
CVE-2008-5723 describes a directory traversal vulnerability in CGI RESCUE KanniBBS2000 (also known as MiniBBS2000/MiniBBS2000i) prior to version 1.03, enabling a remote attacker to read arbitrary files on the server. Connected sources specify that affected products include MiniBBS2000/v1.02 and e...