65 matches found
openSUSE Security Update : zziplib (openSUSE-2017-554)
This update for zziplib fixes the following issues : Secuirty issues fixed : - CVE-2017-5974: heap-based buffer overflow in zzipget32 fetch.c bsc1024517 - CVE-2017-5975: heap-based buffer overflow in zzipget64 fetch.c bsc1024528 - CVE-2017-5976: heap-based buffer overflow in zzipmementryextrabloc...
CVE-2017-5974
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
AZL-43603 CVE-2017-5974 affecting package zziplib 0.13.72-3
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
CVE-2017-5974
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
CVE-2017-5974
CVE-2017-5974 affects zziplib, with heap-based buffer overflow in __zzip_get32 (fetch.c) in zziplib 0.13.62 (and earlier 0.13.56–0.13.61) that can crash the process or, per some advisories, enable arbitrary code execution when processing crafted ZIP files. Multiple advisories confirm affected ver...
CVE-2017-5974
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
CVE-2017-5974
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
UBUNTU-CVE-2017-5974
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
CVE-2017-5974
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
CVE-2016-5974
The CVE-2016-5974 entry concerns a cross-site scripting (XSS) vulnerability in the IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance Web UI. According to the provided sources, remote authenticated users could inject arbitrary JavaScript/HTML via an embedded string in the Web UI. ...
CVE-2014-5974
The CVE-2014-5974 entry describes the PSECU Mobile+ Android app (2.2, com.Vertifi.Mobile.P231381116) as not verifying X.509 certificates from SSL servers, causing potential MITM spoofing and exposure of sensitive data via crafted certificates. This aligns with multiple connected records (NVD/NVD-...
Slackware: Security Advisory (SSA:2007-024-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SLES9: Security update for fetchmail
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012567 within the...
Fedora Update for fetchmail FEDORA-2007-041
Check for the Version of fetchmail OpenVAS Vulnerability Test Fedora Update for fetchmail FEDORA-2007-041 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for fetchmail FEDORA-2007-041
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2008-5974
CVE-2008-5974 affects Active Price Comparison 4.0, where the login.aspx page is vulnerable to SQL injection via the (1) username and (2) password fields. The root cause is improper handling of user input in the login form, allowing remote attackers to execute arbitrary SQL commands. The available...
Gentoo Security Advisory GLSA 200701-13 (fetchmail)
The remote host is missing updates announced in advisory GLSA 200701-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: fetchmail
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2007-5974
CVE-2007-5974 is an SQL injection vulnerability in the mailer.php component of JPortal 2, enabling remote attackers to manipulate the database via the to parameter. The NVD/NVD-derived entries confirm the affected software (JPortal 2) and the vulnerable parameter, with base severity HIGH (CVSS 2....