Debian DLA-878-1 : libytnef security update

CVE-2017-6298 NULL pointer Deref / calloc return value not checked CVE-2017-6299 Infinite Loop / DoS in the TNEFFillMapi function in lib/ytnef.c CVE-2017-6300 Buffer Overflow in version field in lib/tnef-types.h CVE-2017-6301 Out of Bounds Reads CVE-2017-6302 Integer Overflow CVE-2017-6303 Invali...

CVE-2017-6298

CVE-2017-6298 affects ytnef/libytnef up to version 1.9.1, with multiple related issues including NULL pointer dereferences and heap/write errors in decoding winmail.dat attachments. Public docs show a core vulnerability pattern: NULL pointer dereference, out-of-bounds/heap-buffer issues from inco...

Fedora 25 : python-jwcrypto (2016-385de3ac17)

Security fix for CVE-2016-6298 ---- New minor release of python-jwcrypto, with new features and bugfixes for regressions introduced after 0.2.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Fedora 24 : python-jwcrypto (2016-dcf5cad792)

Security fix for CVE-2016-6298 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora 23 : python-jwcrypto (2016-7b4a60ae66)

Security fix for CVE-2016-6298 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora Update for python-jwcrypto FEDORA-2016-dcf5cad792

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-6298

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

CVE-2016-6298

The CVE-2016-6298 issue affects the jwcrypto Python package, specifically the RSA 1.5 implementation (the _Rsa15 class in jwa.py). Before 0.3.2, it lacks the Random Filling protection mechanism, enabling a remote attacker to potentially obtain cleartext data via a Million Message Attack (MMA). Th...

CVE-2016-6298

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

CVE-2015-6298

The CVE-2015-6298 issue concerns Cisco AsyncOS for Web Security Appliance (WSA) and Cisco Web Security Appliance admin web interface. Affected AsyncOS versions include 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085. The root...

CVE-2014-6298

Unrestricted file upload vulnerability in the mmforum extension before 1.9.3 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

CVE-2014-6298

CVE-2014-6298 refers to an unrestricted file upload vulnerability in the TYPO3 extension mm_forum (versions 1.9.2 and below). The issue enables remote code execution when an attacker uploads a file with an executable extension and accesses it via unspecified vectors, due to insufficient input/fil...

Several vulnerabilities in extension mm_forum (mm_forum)

It has been discovered that the extension "mmforum" mmforum is vulnerable to Arbitrary Code Execution, Cross-Site Scripting and Cross-Site Request Forgery Release Date: February 12, 2014 Bulletin update: September 18, 2014 added CVEs Component Type: Third party extension. This extension is not a...

CVE-2012-6298

CA IdentityMinder (r12.0 through CR16, r12.5 before SP15, and r12.6 GA) contains an unspecified vulnerability that could allow a remote attacker to execute arbitrary commands or modify data via unknown vectors. The issue is documented in the CA Security Notice CA20121220-01 and is addressed by pa...

PCAnywhere Detection

Binary data 6298.prm...

CVE-2008-6298

CVE-2008-6298 concerns sISAPILocation (ISAPI filter for IIS) prior to 1.0.2.2. The vulnerability enables bypass of the HTTP header rewrite function, potentially bypassing configuration controls for character encoding and the cookie secure flag. Root cause is described as an issue in the sISAPILoc...

CVE-2007-6298

Cross-site scripting XSS vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages...

CVE-2007-6298

Cross-site scripting XSS vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages...

CVE-2007-6298

CVE-2007-6298 : A cross-site scripting (XSS) vulnerability exists in the Shoutbox module for Drupal 5.x through 5.x-1.1, allowing remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages. Impact is limited to pages rendering the affected block; the issue is du...

CVE-2006-6298

CVE-2006-6298 describes a SQL injection vulnerability in the web application component uye_giris_islem.asp of Metyus Okul Yonetim Sistemi 1.0. The vulnerability allows remote attackers to execute arbitrary SQL commands via the (1) kullanici_ismi and (2) sifre parameters, potentially compromising ...