F5 BIG-IP - Azure cloud vulnerability CVE-2017-6131

In some circumstances, a BIG-IP Azure cloud instance may contain a default administrative password which can be used to remotely log in to the BIG-IP system. The affected administrative account is the Azure instance administrative user created at deployment. The root and admin accounts are not...

Ubuntu 14.04 LTS / 16.04 LTS : libiberty vulnerabilities (USN-3368-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3368-1 advisory. It was discovered that libiberty incorrectly handled certain string operations. If a user or automated system were tricked into processing a...

Ubuntu: Security Advisory (USN-3368-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Valgrind vulnerabilities (USN-3337-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3337-1 advisory. It was discovered that Valgrind incorrectly handled certain string operations. If a user or automated system were tricked into processing a...

USN-3337-1: Valgrind vulnerabilities

It was discovered that Valgrind incorrectly handled certain string operations. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu...

USN-3337-1 valgrind vulnerabilities

It was discovered that Valgrind incorrectly handled certain string operations. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu...

CVE-2017-6131

CVE-2017-6131 affects F5 BIG-IP VE on Azure (Azure cloud instances) where a default Azure deployment password for the Azure Default user may allow remote SSH login to the BIG-IP host. The root and admin accounts are not affected. The vulnerability is documented in F5 advisory K61757346 and relate...

CVE-2016-6131

The demangler in GNU Libiberty allows remote attackers to cause a denial of service infinite loop, stack overflow, and crash via a cycle in the references of remembered mangled types...

CVE-2016-6131

The demangler in GNU Libiberty allows remote attackers to cause a denial of service infinite loop, stack overflow, and crash via a cycle in the references of remembered mangled types...

CVE-2016-6131

CVE-2016-6131 affects the GNU Binutils libiberty demangler. The vulnerability arises from a cycle in the references of remembered mangled types, enabling a remote attacker to cause a denial of service via an infinite loop, stack overflow, or crash. The issue is tied to the demangler in libiberty ...

DLA-552-1 binutils - security update

Bulletin has no description...

CVE-2015-6131

CVE-2015-6131 affects Microsoft Windows Media Center; remote code execution via crafted .mcl files is possible in Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1. The underlying issue is parsing of MCL content that can reference themselves within the Windows Media Center IE security ...

Microsoft Windows Media Center Library - Parsing Remote Code Execution aka self-executing MCL File

Microsoft Windows Media Center Library - Parsing Remote Code Execution aka self-executing MCL File Title: Microsoft Windows Media Center Library Parsing RCE Vuln aka "self-executing" MCL file CVE-2015-6131 Software Vendor: Microsoft Software version : MS Windows Media Center latest version on any...

Microsoft Windows Media Center Library Parsing RCE Vulnerability aka "self-executing" MC

Exploit for windows platform in category remote exploits Title: Microsoft Windows Media Center Library Parsing RCE Vuln aka "self-executing" MCL file CVE-2015-6131 Software Vendor: Microsoft Software version : MS Windows Media Center latest version on any Windows OS. Software Vendor Homepage:...

Microsoft Windows Media Center Library - Parsing Remote Code Execution aka 'self-executing' MCL File

Title: Microsoft Windows Media Center Library Parsing RCE Vuln aka "self-executing" MCL file CVE-2015-6131 Software Vendor: Microsoft Software version : MS Windows Media Center latest version on any Windows OS. Software Vendor Homepage: http://www.microsoft.com CVE: CVE-2015-6131 Exploit Author:...

KLA10715Multiple vulnerabilities in Microsoft Windows Media Center

CVSS: 9.3 Detect date: 12/08/2015 Severity: Critical Description: An unknown vulnerabilities in Microsoft Windows Media Center can be exploited remotely via a specially designed .mcl files. Malicious attacker can execute arbitrary code or obtain sensitive information. Affected products: Microsoft...

Microsoft Windows Media Center Remote Code Execution (MS15-134: CVE-2015-6131)

A flaw has been reported in Windows Media Center when parsing MCL files. This flaw could allow malicious users to execute arbitrary code on a target Windows system by enticing the victim to open a specially crafted Media Center file...

MS15-134: Security Update for Windows Media Center to Address Remote Code Execution (3108669)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities in the Windows Media Center : - An information disclosure vulnerability exists due to improper handling of Media Center link .mcl files. A remote attacker can exploit this vulnerability, v...

[SECURITY] [DLA 298-1] roundup security update

Package : roundup Version : 1.4.15-3+deb6u1 CVE ID : CVE-2012-6130 CVE-2012-6131 CVE-2012-6132 CVE-2012-6133 CVE-2012-6130 Cross-site scripting XSS vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related ...

CVE-2014-6131

IBM Rational Jazz Team Server JTS, as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x...