[SECURITY] [DSA 3618-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3618-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 14, 2016 https://www.debian.org/security/faq -...

openSUSE: Security Advisory for php5 (openSUSE-SU-2016:1761-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated php packages fix security vulnerability

php-mbstring phpmbregexeregreplaceexec - double free CVE-2016-5768. php-mcrypt heap Overflow due to integer overflows CVE-2016-5769. php-SPL int/sizet confusion in SplFileObject::fread CVE-2016-5770. php-SPL Use After Free Vulnerability in PHP's GC algorithm and unserialize CVE-2016-5771. php-WDD...

CVE-2016-5768

A double free flaw was found in the mberegreplacecallback function of php which is used to perform regex search. This flaw could possibly cause a PHP application to crash...

CVE-2016-5768

Double free vulnerability in the phpmbregexeregreplaceexec function in phpmbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash by leveraging a callback...

UBUNTU-CVE-2016-5768

Double free vulnerability in the phpmbregexeregreplaceexec function in phpmbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash by leveraging a callback...

CVE-2015-5768

AppleGraphicsControl in Apple OS X before 10.10.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2015-5768

CVE-2015-5768 affects Apple OS X, specifically AppleGraphicsControl. The issue is an information disclosure vulnerability where a crafted app can cause disclosure of kernel memory-layout information. Affected software is OS X Yosemite prior to 10.10.5. Root cause is bounds/ memory handling relate...

XOOPS Module Amevents SQL Injection (CVE-2008-5768)

An SQL injection vulnerability has been reported in Sirium Am Events Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-5768

The CVE-2014-5768 entry concerns the Android app Food Planner (aka dk.boggie.madplan.android) version 4.8.4.3-google. The vulnerability is that the app does not verify X.509 certificates from SSL/TLS servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information v...

CVE-2013-5768

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect integrity via unknown vectors related to ActiveX Controls...

CVE-2013-5768

CVE-2013-5768 is an Oracle Siebel CRM issue affecting the Siebel UI Framework (Open_UI) via ActiveX Controls in Oracle Siebel CRM 8.1.1 and 8.2.2. The vulnerability allows remote authenticated attackers to affect data integrity, typically via HTTP, with the issue attributed to authenticated netwo...

CVE-2008-5768

The CVE-2008-5768 entry is an actionable SQL injection in the AM Events module (Amevents) for XOOPS version 0.22, exploitable through print.php via the id parameter. The underlying issue is a direct SQL command construction vulnerability that allows remote attackers to execute arbitrary SQL comma...

SuSE 10 Security Update : clamav (ZYPP Patch Number 5768)

Various bugs such as a getunicodename off-by-one buffer overflow, a bug in URL parsing of phishing checks as well as minor other issues have been fixed in clamav. CVE-2008-5050 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2008-2673

creationtimestamp| type| source ---|---|--- 2008-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5768...

CVE-2007-5768

The CVE-2007-5768 entry affects the Globe7 soft phone client version 7.3, which transmits username and password in cleartext over HTTP. This exposes credentials to network eavesdropping, enabling potential disclosure of sensitive information. The vulnerability is a information disclosure issue ca...

CVE-2006-5768

CVE-2006-5768 covers multiple PHP remote file inclusion flaws in Cyberfolio 2.0 RC1 and earlier when register_globals is enabled. The vulnerability allows an attacker to cause the application to execute arbitrary PHP code by supplying a URL in the av parameter to one of four scripts: msg/view.php...