83 matches found
RHEL 7 : php (RHSA-2016:2598)
An update for php is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
Moderate: Red Hat Security Advisory: php security and bug fix update
An update for php is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
Amazon Linux: Security Advisory (ALAS-2016-728)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES11 Security Update : php5 (SUSE-SU-2016:2080-1)
php5 was updated to fix the following security issues : - CVE-2016-6297: Stack-based buffer overflow vulnerability in phpstreamzipopener bsc991426. - CVE-2016-6291: Out-of-bounds access in exifprocessIFDinMAKERNOTE bsc991427. - CVE-2016-6289: Integer overflow leads to buffer overflow in...
SUSE SLES11 Security Update : php53 (SUSE-SU-2016:2013-1)
php53 was updated to fix five security issues. These security issues were fixed : - CVE-2016-5769: mcrypt: Heap Overflow due to integer overflows bsc986388. - CVE-2015-8935: XSS in header with Internet Explorer bsc986004. - CVE-2016-5772: Double Free Courruption in wddxdeserialize bsc986244. -...
CVE-2016-5767
Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library aka libgd before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly...
CVE-2016-5767
The CVE-2016-5767 issue is an integer overflow in the GD library’s gdImageCreate function used by the PHP gd extension . A crafted GD image can trigger a remote denial of service via a heap-based buffer overflow. Affected ranges include PHP builds that embed libgd before 2.0.34RC1, specifically P...
CVE-2016-5767
Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library aka libgd before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly...
CVE-2016-5767
Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library aka libgd before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly...
Medium: php55, php56
Issue Overview: A stack consumption vulnerability in GD in PHP allows remote attackers to cause a denial of service via a crafted imagefilltoborder call. CVE-2015-8874 An integer overflow, leading to a heap-based buffer overflow was found in the imagecreatefromgd2 function of PHP's gd extension. ...
Fedora 24 : gd (2016-a4d48d6fd6)
Version 2.2.2 Security related fixes : - Integer Overflow in gdImagePaletteToTrueColor resulting in heap overflow CVE-2016-5767 - Stack overflow with gdImageFillToBorder CVE-2015-8874 - Integer Overflow in gd2GetHeader resulting in heap overflow CVE-2016-5766 - NULL pointer Dereference at...
openSUSE: Security Advisory for php5 (openSUSE-SU-2016:1761-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle MySQL Multiple Unspecified vulnerabilities-34 (Jun 2016) - Linux
Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...
CVE-2015-5767
CVE-2015-5767 is a UI spoofing vulnerability in Safari on iOS prior to iOS 9, allowing a malicious site to spoof displayed URLs. It is part of a set of Safari UI spoofing issues (CVE-2015-5764/5765/5767) addressed by Safari 9, which includes improved URL display logic. The NVD entry cites a Mediu...
CVE-2014-5767
The CVE-2014-5767 entry concerns the Android app IM+ (de.shapeservices.impluslite) version 6.6.2, where SSL/TLS connections do not verify X.509 certificates. Root cause: the app fails to validate server certificates, allowing a man-in-the-middle attacker to spoof servers and recover sensitive dat...
Oracle MySQL Multiple Unspecified vulnerabilities-01 (Oct 2013) - Windows
Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...
CVE-2013-5767
CVE-2013-5767 maps to a family of MySQL Server vulnerabilities discussed by PT Security, centered on the Server:Optimizer subcomponent and related to inadequate access control. The public material describes remote exploitation via network access that can lead to a hang or frequent, repeatable cra...
CVE-2012-5767
The affected product is IBM TS3500 Tape Library with the web UI. The vulnerability (CVE-2012-5767) exists in firmware versions lower than C260 and could allow an authenticated remote user to gain higher privileges via unspecified vectors. IBM’s security bulletin specifies that applying firmware v...
CVE-2008-5767
CVE-2008-5767 describes an SQL injection in the authors.asp page of the gNews Publisher, exploitable via the authorID parameter. The underlying issue is improper input handling allowing remote attackers to manipulate SQL queries. The NVD records a CVSSv2 base score of 7.5 (HIGH) with network atta...
