Mozilla Firefox ESR Security Advisories (MFSA2019-04, MFSA2019-05) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox Security Advisories (MFSA2019-04, MFSA2019-05) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

KLA11416 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilities were found in Mozilla Firefox and Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An use-after-free vulnerability in Sk...

Updated openjpeg2 packages fix security vulnerabilities

A stack-based buffer overflow in the pgxtoimage function in jpwl/convert.c could crash the converter CVE-2017-17479. A stack-based buffer overflow in the pgxtovolume function in jp3d/convert.c could crash the converter CVE-2017-17480. A flaw was found in OpenJPEG 2.3.0, there is an integer overfl...

Fedora 29 : mingw-openjpeg2 / openjpeg2 (2018-9954b282ec)

This update fixes CVE-2018-5785. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

Fedora 28 : mingw-openjpeg2 / openjpeg2 (2018-a71b957c50)

This update fixes CVE-2018-5785. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

Fedora Update for mingw-openjpeg2 FEDORA-2018-200c84e08a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : mingw-openjpeg2 / openjpeg2 (2018-64d64bd05e)

This update fixes CVE-2018-5785. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

Fedora Update for openjpeg2 FEDORA-2018-a71b957c50

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-5785

A remote information disclosure vulnerability is present in HPE Matrix Operating Environment Software version 7.6 (and SIM Software version 7.6 per CNVD). The issue could allow a remote attacker to obtain sensitive information. No root-cause or exploit details are provided in the connected docume...

CVE-2018-5785

OpenJPEG 2.3.0 is affected by CVE-2018-5785 due to an integer overflow caused by an out-of-bounds left shift in opj_j2k_setup_encoder (openjp2/j2k.c). This vulnerability can allow a remote attacker to cause a denial of service via a crafted BMP file. Multiple vendor advisories (Debian DSA-4405, A...

Apple QuickTime < 7.7.8 Multiple Vulnerabilities

Binary data 9305.prm...

Apple QuickTime Multiple Vulnerabilities (Sep 2015) - Windows

Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

CVE-2015-5786

Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted file, a different vulnerability than CVE-2015-5785...

Memory corruption

Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted file, a different vulnerability than CVE-2015-5785...

CVE-2015-5785

Apple QuickTime

August 2015 Apple QuickTime Security Patches

Apple on Thursday pushed out a new version of QuickTime for Windows that patched nine vulnerabilities, including a handful reported Aug. 13 by Cisco Talos and Fortinet researchers. All five flaws, if exploited, could lead to a crash of the media player or code execution in some cases, Apple said ...

Apache Axis2 <= 1.6.2 Multiple Vulnerabilities

Apache Axis2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:apache:axis2"; if...

CVE-2014-5785

The CVE-2014-5785 entry refers to the Android app Bouncy Bill World-Cup (1.0.1, aka mominis.Generic_Android.Bouncy_Bill_World_Cup) failing to verify X.509 certificates when contacting SSL servers. Root cause is missing certificate validation, allowing man-in-the-middle attackers to spoof servers ...

CVE-2013-5785

CVE-2013-5785 affects Oracle Fusion Middleware’s Oracle Reports Developer component (versions 11.1.1.6, 11.1.1.7, 11.1.2.1). The entry notes an unspecified vulnerability allowing remote attackers to impact confidentiality, integrity, and availability via unknown vectors related to Security and Au...