openSUSE Security Update : the Linux Kernel (openSUSE-2017-287)

The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-6074: The dccprcvstateprocess function in net/dccp/input.c in the Linux kernel mishandled DCCPPKTREQUEST packet data structures in the LISTEN state, which allowe...

openSUSE: Security Advisory for kernel (openSUSE-SU-2017:0547-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for kernel (openSUSE-SU-2017:0541-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.2 kernel was updated to 4.4.49 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5986: A userlevel triggerable BUGON on sctpwaitforsndbuf was fixed. bsc1025235 - CVE-2017-5970: The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c...

[SECURITY] [DSA 3791-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3791-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 22, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3791-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3791-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 22, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3791-1 (linux - security update)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or have other impacts. CVE-2016-6786 / CVE-2016-6787It was discovered that the performance events subsystem does not properly manage locks during certain migrations, allowin...

Debian: Security Advisory (DSA-3791-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : kernel (2017-92d84f68cf)

The 4.9.9. update contains a number of important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

CVE-2016-5897

The CVE-2016-5897 issue pertains to IBM Jazz Reporting Service (JRS) and its Lifecycle Query Engine (LQE), where an HTML injection vulnerability could allow a remote attacker to cause malicious HTML to execute in a victim’s browser within the hosting site’s context. Affected products/versions are...

CVE-2015-5897

CVE-2015-5897 : The Address Book framework in macOS prior to 10.11 allows local users to gain privileges by injecting code via an environment variable into processes that load the Address Book framework. Root cause: improper handling of environment variables in the Address Book integration. Impac...

Fedora Update for nrpe FEDORA-2014-5897

Check the version of nrpe SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868498";...

CVE-2014-5897

The CVE-2014-5897 entry affects the Android app Parallel Mafia (com.perblue.pm.client). The root cause is that the application does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and exfiltrate sensitive information via crafted certificates. Documented im...

CVE-2013-5897

Technical details for CVE-2013-5897 are not publicly provided in the supplied documents. No concrete information on affected components, root cause, or remediation is present here. Monitor official advisories for updates.

CVE-2012-5897

The 1 SimpleTree and 2 ReportTree classes in the ARDoc ActiveX control ARDoc.dll in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument...

CVE-2012-5897

CVE-2012-5897 affects Quest InTrust 10.4.0.853 and earlier via the ARDoc ActiveX control (ARDoc.dll). The (1) SimpleTree and (2) ReportTree classes do not properly implement the SaveToFile method, enabling remote attackers to write or overwrite arbitrary files through the bstrFileName argument. D...

CVE-2012-5897

creationtimestamp| type| source ---|---|--- 2012-03-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18672...

CVE-2008-5897

CodeAvalanche FreeWallpaper is affected by an improper access control vulnerability that stores the administrator password database under the web root. An attacker can directly request the file _private/CAFreeWallpaper.mdb to download the database containing the administrator password. The CVE-20...

CVE-2008-5897

creationtimestamp| type| source ---|---|--- 2008-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7470...

CVE-2007-5897

Buffer overflow in Oracle Database Server (MDSYS.SDO_CS) allows remote authenticated users to crash the server and execute arbitrary code via the TRANSFORM function. Affected: Oracle 8iR3, 9iR1/2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4. Note: this CVE may be related to CVE-2007-5515, CVE-2007-550...