CVE-2018-5849

Due to a race condition in the QTEECOM driver in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel, when more than one HLOS client loads the same TA, a Use After Free condition can occur...

CVE-2018-5849

CVE-2018-5849 affects Qualcomm QTEECOM driver on Android (CAF) where a race condition when multiple HLOS clients load the same TA can cause a Use-After-Free, enabling Elevation of Privilege. Documented impact is EoP with High/Partial confidentiality/integrity/availability implications; CVSSv3 bas...

CVE-2017-5849

CVE-2017-5849 affects netpbm's tiffttopnm in version 10.47.63, where improper use of libtiff TIFFRGBAImageGet creates the possibility of an out-of-bounds read/write via a crafted TIFF image, leading to denial of service. The connected advisories note affected packages across Linux distros (e.g., ...

Fedora 24 : netpbm (2017-fa4e441e03)

Security fix for CVE-2017-2586, CVE-2017-2587 and CVE-2017-5849, ---- Add license information file copyrightsummary ---- New version of netpbm is available 10.77.00 ---- add missing directives about bundled libraries jasper and jbigkit ---- New version of netpbm is available 10.76.00 Note that...

Fedora Update for netpbm FEDORA-2017-fa4e441e03

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-5849

CVE-2016-5849 affects Siemens SICAM PAS up to version 8.07, where an authenticated local attacker can obtain sensitive configuration information from the SICAM PAS database file if the database is in a stopped state. The issue is an information exposure vulnerability (not remote-exploit) requirin...

Siemens SICAM PAS Information Disclosure Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-182-02A Siemens SICAM PAS Vulnerabilities that was published November 29, 2016, on the NCCIC/ICS-CERT web site. Positive Technologies’ Ilya Karpov and Dmitry Sklyarov have identified two vulnerabilities in the...

CVE-2015-5849

The CVE-2015-5849 issue affects Apple OS X (pre-10.11) where the AppleEvents filtering implementation mishandles attempts to send events to a different user. This allows a local user, connected via a screen-sharing session, to bypass intended access restrictions by delivering AppleEvents to anoth...

Oracle: Security Advisory (ELSA-2013-1447)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2013-235)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ClipBucket <= 2.6 Multiple SQLi Vulnerabilities - Active Check

ClipBucket is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SUSE SLES10 Security Update : IBM Java 5 (SUSE-SU-2013:1669-1)

IBM Java 5 SR16-FP4 has been released which fixes lots of bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ CVEs fixed: CVE-2013-4041, CVE-2013-5375, CVE-2013-5372, CVE-2013-5843, CVE-2013-5830, CVE-2013-5829, CVE-2013-5842,...

CVE-2014-5849

The CVE-2014-5849 entry concerns the Maleficent Free Fall Android app (package com.disney.maleficent_goo) v1.2.0. The vulnerability is failure to verify X.509 certificates when connecting to SSL servers, enabling MITM attackers to spoof servers and access sensitive data via a crafted certificate....

IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)

According to its version, the IBM Domino formerly IBM Lotus Domino on the remote host is 9.x prior to 9.0.1 Fix Pack 1 FP1. It is, therefore, affected by the following vulnerabilities : - A stack overflow issue exists due to the insecure '-z execstack' flag being used during compilation, which...

Low: Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.4, 5.5 and 5.6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Ubuntu Update for openjdk-6 USN-2033-1

Check for the Version of openjdk-6 OpenVAS Vulnerability Test $Id: gbubuntuUSN20331.nasl 8526 2018-01-25 06:57:37Z teissa $ Ubuntu Update for openjdk-6 USN-2033-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

RHEL 5 / 6 : java-1.6.0-ibm (RHSA-2013:1508)

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Critical: Red Hat Security Advisory: java-1.7.0-ibm security update

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Important: Red Hat Security Advisory: java-1.5.0-ibm security update

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give...

RedHat Update for java-1.7.0-openjdk RHSA-2013:1447-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...