CVE-2016-3119

The processdbargs function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 aka krb5 through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service NULL pointer dereferenc...

CVE-2016-3119

The processdbargs function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 aka krb5 through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service NULL pointer dereferenc...

CVE-2016-3119

The processdbargs function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 aka krb5 through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service NULL pointer dereferenc...

CVE-2016-3119

CVE-2016-3119 affects MIT Kerberos 5 (krb5) kadmind LDAP KDB module. The flaw lies in process_db_args in ldap_principal2.c, where the DB argument is mishandled, enabling remote authenticated users to trigger a NULL pointer dereference and kadmind crash via a crafted modify_principal request. Affe...

CentOS Update for java CESA-2016:0512 centos5

Check the version of java SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882440";...

RHEL 5 / 6 / 7 : java-1.7.0-oracle (RHSA-2016:0515)

An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 5, Oracle Java for Red Hat Enterprise Linux 6, and Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerabili...

Oracle Linux 5 / 7 : java-1.7.0-openjdk (ELSA-2016-0512)

The remote Oracle Linux 5 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-0512 advisory. 1:1.7.0.99-2.6.5.0.0.1 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Oracle Linux' 1:1.7.0.99-2.6.5.0 - Explictly required libXcomposite-devel for PR28...

univates.br XSS vulnerability

Vulnerable URL: https://www.univates.br/busca?frase=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 110192 Google Pagerank| 5 V...

decathlon.pt XSS vulnerability

Vulnerable URL: http://www.decathlon.pt/Comprar/%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 66539 Google Pagerank| 5 VIP website status:| No Check decathlon....

Stable Channel Update

The stable channel has been updated to 49.0.2623.108 for Windows, Mac, and Linux. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library...

johnsoncitypress.com XSS vulnerability

Vulnerable URL: http://www.johnsoncitypress.com/News/article.php?id=91361%22/%3E%3Csvg/onload=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 110562...

Apple Mac OSX - Kernel Unchecked Array Index Used to Read Object Pointer Then Call Virtual Method in

Exploit for macOS platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=709 nvDevice::ReleaseDeviceTexture is external method 0x10a of userclient 5 of the geforce IOAccelerator. It takes a single uint argument text:000000000001BCD2 mov r14d, esi...

Fedora Update for webkitgtk FEDORA-2016-5

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

neutralposture.com XSS vulnerability

Vulnerable URL: http://neutralposture.com/site/products.php?cat=04%22/%3E%3Csvg/onload=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 21:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

greencore.com XSS vulnerability

Vulnerable URL: http://www.greencore.com/?s=news Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 628765 Google Pagerank| 5 VIP website status:| No Check greencore.com SSL connection...

helvetas.org XSS vulnerability

Vulnerable URL: https://www.helvetas.org/search.cfm?uXnavID=1243=%22+onmouseover%3Djavascript%3Aalert%28%22XSSPOSED%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 07.05.2016 Latest check for patch:| 07.05.2016 06:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

dunnesstores.com Open Redirect vulnerability

Vulnerable URL: http://www.dunnesstores.com/pws/client/veedesk/Engagement.html?site=dunnes=en-gb&vee24ConnMode;=114=1=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

[SECURITY] Fedora 22 Update: rubygem-actionview-4.2.0-5.fc22

Simple, battle-tested conventions and helpers for building web pages...

[SECURITY] Fedora 23 Update: rubygem-actionpack-4.2.3-5.fc23

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

Stagefright Variant 'Metaphor' Puts Millions Of Samsung, LG and HTC Phones At Risk

Millions of Android users are at risk of a new Metaphor exploit that can take over Samsung, LG and HTC phones in under 20 seconds. The hack gives attackers access to the targeted phones including the ability to inject malware and take control over key smartphone functions. Discovered by...