openSUSE: Security Advisory for libsass (openSUSE-SU-2019:1791-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : libsass (openSUSE-2019-1791)

This update for libsass to version 3.6.1 fixes the following issues : Security issues fixed : - CVE-2019-6283: Fixed heap-buffer-overflow in Sass::Prelexer::parenthesescopechar const boo1121943. - CVE-2019-6284: Fixed heap-based buffer over-read exists in Sass:Prelexer:alternatives boo1121944. -...

CVE-2019-6284

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...

CVE-2019-6284

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...

DEBIAN-CVE-2019-6284

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...

CVE-2019-6284

CVE-2019-6284 : LibSass 3.5.5 has a heap-based buffer over-read in Sass::Prelexer::alternatives (prelexer.hpp). This is the root cause of a memory safety issue that can lead to a crash or memory corruption. Documented impact is a denial of service through crash/over-read; exploitation details or ...

CVE-2017-6284

CVE-2017-6284 describes a vulnerability in NVIDIA Security Engine’s DRBG where initialization/storage of sensitive data is flawed and encryption is weakened, potentially leading to information disclosure. NVIDIA’s NVIDIA Jetson TX1/TX2 Linux for Tegra updates (R28.3) address multiple issues inclu...

Security Bulletin: NVIDIA SHIELD TV Security Updates for Multiple Vulnerabilities

NVIDIA SHIELD TV security updates for vulnerabilities that may lead to denial of service, information disclosure, or escalation of privileges Vulnerability Details The following sections summarize the potential vulnerabilities. Descriptions use CWE™ and risk assessments follow CVSS. CVE-2017-6282...

CVE-2012-6284

CVE-2012-6284 is rejected/not used per the initial Description.

Cisco TelePresence Server Conference Control Protocol API URL Handling DoS (cisco-sa-20150916-tps)

According to the self-reported version, the Cisco TelePresence Server running on the remote host is affected by a buffer overflow condition in the Conference Control Protocol API due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a crafted...

CVE-2015-6284

Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.12.33 on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote attackers to cause a denial of service device crash via a crafted URL, aka Bug ID...

CVE-2015-6284

Cisco TelePresence Server is affected by a buffer overflow in the Conference Control Protocol API that can be triggered by a crafted URL to cause a denial of service (device crash). The vulnerability affects Cisco TelePresence Server software on 7010, MSE 8710, Multiparty Media 310/320, and Virtu...

CVE-2014-6284

CVE-2014-6284 affects SAP Sybase ASE prior to 15.7 SP132 and 16.0 prior to 16.0 SP01. The issue lets remote attackers bypass the challenge–response mechanism and obtain access to the probe account via a crafted response (SAP Security Note 2113995). The cited notes describe a security bypass in th...

OracleVM 2.1 : libxml2 (OVMSA-2009-0018)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add bug347316.patch to backport fix for bug347316 from upstream version - Add libxml2-enterprise.patch and update logos in tarball - Fix a couple of crash CVE-2009-2414, CVE-2009-2416 - Resolves:...

CVE-2013-6284

Technical details (affected products, versions, root cause, or fixes) are not publicly provided in the supplied documents. Monitor for updates.

SuSE 10 Security Update : ImageMagick.rpm (ZYPP Patch Number 6284)

This update of ImageMagick fixes an integer overflow in the XMakeImage function that allowed remote attackers to cause a denial-of-service and possibly the execution of arbitrary code via a crafted TIFF file. CVE-2009-1882 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description ...

SLES9: Security update for libxml2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml2 libxml2-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5020669...

SuSE9 Security Update : libxml2 (YOU Patch Number 12032)

libxml2 contained a DoS condition in xmlCurrentChar's UTF-8 processing. CVE-2007-6284 has been assigned to this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2008-6284

SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via the site parameter...

CVE-2008-6284

CVE-2008-6284 describes a SQL injection vulnerability in the J1Exchange/ Z1Exchange 1.0 product, specifically in the file edit.php where the site parameter can be exploited to execute arbitrary SQL commands. The issue enables remote attackers to interact with the database and potentially compromi...