60 matches found
CVE-2012-6243
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2016-6243
OpenBSD 5.8/5.9 kernel vulnerability CVE-2016-6243: thrsleep in kern/kern_synch.c can be triggered by a crafted tsp value in __thrsleep, allowing local users to cause a denial of service (kernel panic). Documents confirm affected file and parameters; no remediation details are provided here. Expl...
Oracle: Security Advisory (ELSA-2015-2393)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
wireshark security, bug fix, and enhancement update
1.10.14-7.0.1 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.10.14-7 - Rebase some tvbuff API from upstream to 1.10.14 - Fixes crash when tvblengthremaining is used - Related: CVE-2015-6244 1.10.14-6 - Security patch - Resolves: CVE-2015-3182 1.10.14-5 - Fix crash...
openSUSE Security Update : wireshark (openSUSE-2015-683)
wireshark was updated to version 1.12.8 to fix ten security issues. These security issues were fixed : - CVE-2015-6247: The dissectopenflowtablemodv5 function in epan/dissectors/packet-openflowv5.c in the OpenFlow dissector in Wireshark 1.12.x before 1.12.7 did not validate a certain offset value...
Fedora 22 : wireshark-1.12.7-2.fc22 (2015-13945)
Enable libnl3 see rhbz1207386, rhbz1247566 - Remove airpcap switch doesn't have any effect on Linux - Backport patch no. 11 - Fixed building with F24+ Ver. 1.12.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
Debian DSA-3367-1 : wireshark - security update
Multiple vulnerabilities were discovered in the dissectors/parsers for ZigBee, GSM RLC/MAC, WaveAgent, ptvcursor, OpenFlow, WCCP and in internal functions which could result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Fedora 23 : wireshark-1.12.7-2.fc23 (2015-13946)
Enable libnl3 see rhbz1207386, rhbz1247566 - Remove airpcap switch doesn't have any effect on Linux - Backport patch no. 11 - Fixed building with F24+ Ver. 1.12.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
CVE-2015-6243
The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service application crash via a crafted packet, related to the 1 dissectorgetstringhandle and 2...
CVE-2015-6243
CVE-2015-6243 affects Wireshark 1.12.x prior to 1.12.7. The dissector-table in epan/packet.c mishandles searches for empty strings, enabling a remote attacker to cause a denial of service (application crash) via a crafted packet, specifically related to the functions dissector_get_string_handle a...
Reflected Cross-Site Scripting (XSS) in EWWW Image Optimizer WordPress Plugin
Advisory ID: HTB23234 Product: EWWW Image Optimizer WordPress plugin Vendor: Shane Bishop Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: September 17, 2014 without technical details Vendor Notification: September 17, 2014 Vendor Patch: September 24, 2014...
CVE-2014-6243
Cross-site scripting XSS vulnerability in the EWWW Image Optimizer plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the error parameter in the ewww-image-optimizer.php page to wp-admin/options-general.php, which is not properly handled in a pngo...
CVE-2014-6243
The CVE-2014-6243 vulnerability affects the WordPress plugin EWWW Image Optimizer, specifically versions prior to 2.0.2. A reflected Cross-Site Scripting (XSS) flaw exists in the ewww-image-optimizer.php page when crafting the page parameter passed to wp-admin/options-general.php. The error messa...
WordPress EWWW Image Optimizer 2.0.1 Cross Site Scripting Vulnerability
WordPress EWWW Image Optimizer plugin version 2.0.1 suffers from a cross site scripting vulnerability. Product: EWWW Image Optimizer WordPress plugin Vendor: Shane Bishop Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: September 17, 2014 without technical...
WordPress EWWW Image Optimizer 2.0.1 Cross Site Scripting
Advisory ID: HTB23234 Product: EWWW Image Optimizer WordPress plugin Vendor: Shane Bishop Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: September 17, 2014 without technical details Vendor Notification: September 17, 2014 Vendor Patch: September 24, 2014...
CVE-2013-6243
CVE-2013-6243 pertains to the WordPress Landing Pages plugin (version 1.2.3 and older up to 20131009). The vulnerability is a SQL injection in the module.utils.php / index path via the “post” parameter of wp-admin/edit.php or index.php, enabling remote attackers to append arbitrary SQL commands. ...
RHEL 5 : flash-plugin (RHSA-2008:0945)
An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 The erratum has been updated to...
Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003
The remote host is missing Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003. One or more of the following components are affected: AFP Server Apache AppKit Apple Pixlet Video ATS CFNetwork CoreFoundation CoreGraphics CoreTypes CUPS Flash Player Plug-in Help Viewer iCal International...
openSUSE Security Update : flash-player (flash-player-294)
This update of flash-player fixes several critical security vulnerabilities. CVE-2007-6243, CVE-2008-3873, CVE-2007-4324, CVE-2008-4401, CVE-2008-4503, CVE-2008-4546 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...