56 matches found
openSUSE Security Update : zziplib (openSUSE-2017-554)
This update for zziplib fixes the following issues : Secuirty issues fixed : - CVE-2017-5974: heap-based buffer overflow in zzipget32 fetch.c bsc1024517 - CVE-2017-5975: heap-based buffer overflow in zzipget64 fetch.c bsc1024528 - CVE-2017-5976: heap-based buffer overflow in zzipmementryextrabloc...
CVE-2017-5979
The prescanentry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...
CVE-2017-5979
CVE-2017-5979 affects zziplib up to 0.13.62, where the prescan_entry function in fseeko.c can be triggered by a crafted ZIP file to cause a NULL pointer dereference and crash (denial of service). Multiple advisories (Debian DSA 3878-1, DLA-994-1; Mageia MGASA-2017-0163; Arch ASA-201705-15) indica...
CVE-2017-5979
The prescanentry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...
CVE-2014-5979
CVE-2014-5979 affects the TV Bengali Open Directory (com.TVBengali) Android app version 1.4. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The...
CVE-2013-5979
Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter to index.php...
CVE-2013-5979
Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter to index.php...
CVE-2013-5979
The CVE-2013-5979 issue affects Spring Signage Xibo 1.2.x (pre-1.2.3) and 1.4.x (pre-1.4.2). A directory traversal flaw allows remote attackers to read arbitrary files by supplying a .. in the p parameter to index.php. Impact: potential exposure of sensitive server files. Root cause: insufficient...
Mandriva Update for java-1.6.0-openjdk MDVSA-2012:169 (java-1.6.0-openjdk)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2008-5979
Cross-site scripting XSS vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to inject arbitrary web script or HTML via the Email parameter...
CVE-2008-5979
CVE-2008-5979 describes a cross-site scripting (XSS) vulnerability in default.asp of Ocean12 Mailing List Manager Gold. The flaw allows remote attackers to inject arbitrary web script or HTML via the Email parameter, enabling potential session hijacking or defacement depending on the context and ...
CVE-2008-5979
creationtimestamp| type| source ---|---|--- 2008-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7319...
CVE-2007-5979
The CVE-2007-5979 entry describes a Cross-site scripting (XSS) vulnerability in F5 Firepass 4100 SSL VPN, specifically in the download_plugin.php3 component. The root cause is untrusted input in the backurl parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected soft...
CVE-2006-5979
The CVE-2006-5979 entry concerns Renasoft NetJetServer 2.5.3.939 (and possibly earlier) where insecure permissions on Global.asa may allow remote attackers to obtain sensitive information. The available documents state the affected software and the underlying issue but do not provide exploit step...