openSUSE Security Update : libraw (openSUSE-2018-849)

This update for libraw fixes the following issues : The following security vulnerabilities were addressed : - CVE-2018-5813: Fixed an error within the 'parseminolta' function dcraw/dcraw.c that could be exploited to trigger an infinite loop via a specially crafted file. This could be exploited to...

openSUSE: Security Advisory for libraw (openSUSE-SU-2018:2286-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-5811

An error within the "nikoncoolscanloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash...

CVE-2017-5811

CVE-2017-5811 affects HP (HPE) Network Automation 9.1x, 9.2x, 10.0x, 10.1x and 10.2x. The vulnerability is a FileServlet directory traversal information disclosure caused by lack of validation of a user-supplied path, allowing remote attackers to read arbitrary files. The linked sources in the co...

HPE Network Automation FileServlet Information Disclosure (CVE-2017-5811)

An information disclosure vulnerability exists in HPE Network Automation. The vulnerability is due to a lack of sanitization on a user supplied path on requests handled by FileServlet. A remote attacker could exploit this vulnerability by sending a maliciously crafted request to the target server...

CVE-2016-5811

CVE-2016-5811 affects Visonic PowerLink2: all versions prior to the October 2016 firmware release. The issue is that user-controlled input is not neutralized before being output in web pages, causing Cross-Site Scripting (XSS). Exploitation is reported to be possible remotely, with impact limited...

Mageia: Security Advisory (MGASA-2016-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-5811

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5811

The CVE-2015-5811 entry concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows a remote attacker to execute arbitrary code or cause memory corruption/application crash via a crafted web site (a WebKit-specific issue, not the same as other WebKit CVEs mentio...

CVE-2014-5811

The CVE-2014-5811 entry concerns the ZOOM Cloud Meetings Android app (package us.zoom.videomeetings) version identified as @7F060008, which does not verify X.509 certificates from SSL servers. This flaw enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via ...

CVE-2013-5811

Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.5 SP3, 4.5 SP3a-k, 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, and 5.0 SP1a-b allows remote authenticated users to affect confidentiality via...

CVE-2013-5811

CVE-2013-5811 affects the Oracle Health Sciences InForm component within Oracle Industry Applications (versions 4.5 SP3/4.6 SP2 and 5.0 SP1 variants). The vulnerability is described as an unspecified issue in the Web-facing functionality that could allow remote authenticated users to compromise c...

CVE-2008-5811

CVE-2008-5811 affects the PaxGallery (com_paxgallery) component version 0.1 for Joomla!. The underlying issue is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands through the gid parameter in a table action to index.php. The vulnerability has a CVSS v2 ...

CVE-2008-5811

creationtimestamp| type| source ---|---|--- 2008-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7587...

CVE-2006-5811

CVE-2006-5811 concerns OpenEMR 2.8.1 where enabling register_globals permits a PHP remote file inclusion via a URL supplied in the GLOBALS[srcdir] parameter in library/translation.inc.php. Exploitation would allow arbitrary PHP code execution on the affected system. The NVD entry lists a CVSS v2 ...