openSUSE: Security Advisory for gdk-pixbuf (openSUSE-SU-2017:2393-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2016-6312

The moddontdothat component of the moddavsvn Apache module in Subversion as packaged in Red Hat Enterprise Linux 5.11 does not properly detect recursion during entity expansion, which allows remote authenticated users with access to the webdav repository to cause a denial of service memory...

CVE-2016-6312

The moddontdothat component of the moddavsvn Apache module in Subversion as packaged in Red Hat Enterprise Linux 5.11 does not properly detect recursion during entity expansion, which allows remote authenticated users with access to the webdav repository to cause a denial of service memory...

CVE-2016-6312

CVE-2016-6312 is a regression of CVE-2009-1955 describing a DoS in Apache httpd/mod_dav_svn caused by the mod_dontdothat component failing to detect recursive XML entity expansion. Connected sources confirm the underlying issue is in APR-util's XML entity handling (as part of APR-util) used by Ap...

CVE-2017-6312

CVE-2017-6312 : In gdk-pixbuf, an integer overflow in io-ico.c allows an attacker to cause a denial of service (segmentation fault and crash) via a crafted ICO image entry offset, triggering an out-of-bounds read. Impact is a DoS; exploitation details are documented in multiple advisories. Mitiga...

CVE-2017-6312

Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations...

CVE-2017-6312

Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations...

CVE-2017-6312

An out-of-bounds read flaw was found in the way GdkPixbuf handled ICO format files. A maliciously crafted ICO file could cause the application using GdkPixbuf to crash...

CVE-2016-6312

A denial of service vulnerability was found in subversion. The moddontdothat component of the moddavsvn Apache module did not properly protect against exponential XML entity expansion attacks. An attacker with credentials to the webdav repository could send a crafted message that would result in...

Cisco TelePresence Server Malformed STUN Packet Processing DoS (cisco-sa-20160406-cts2)

According to its self-reported version, the Cisco TelePresence Server running on the remote host is affected by a denial of service vulnerability due to improper processing of malformed Session Traversal Utilities for NAT STUN packets. An unauthenticated, remote attacker can exploit this, via...

CVE-2015-6312

Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine MSE 8710, Multiparty Media 310 and 320, and Virtual Machine VM devices allows remote attackers to cause a denial of service device reload via malformed STUN packets, aka Bug ID CSCuv01348...

CVE-2015-6312

Cisco TelePresence Server 3.1 (on 7010, MSE 8710, Multiparty Media 310/320 and VM devices) is affected by CVE-2015-6312 due to improper processing of malformed STUN packets. An unauthenticated, remote attacker could cause a denial of service by forcing the device to reload, which also disrupts on...

CVE-2015-6312

Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine MSE 8710, Multiparty Media 310 and 320, and Virtual Machine VM devices allows remote attackers to cause a denial of service device reload via malformed STUN packets, aka Bug ID CSCuv01348...

CVE-2014-6312

Cross-site request forgery CSRF vulnerability in the Login Widget With Shortcode login-sidebar-widget plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the customstyleafo paramete...

CVE-2014-6312

CVE-2014-6312: A CSRF vulnerability in the WordPress plugin Login Widget With Shortcode (login-sidebar-widget) prior to version 3.2.1 allows remote attackers to hijack administrator sessions and perform XSS via the custom_style_afo parameter on the login_widget_afo page leading to wp-admin/option...

CVE-2014-6312

Cross-site request forgery CSRF vulnerability in the Login Widget With Shortcode login-sidebar-widget plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the customstyleafo paramete...

CVE-2013-6312

CVE-2013-6312 affects IBM Rational Service Tester (8.3.x and 8.5.x before 8.5.1) and Rational Performance Tester (8.3.x and 8.5.x before 8.5.1). The vulnerability path allows remote attackers to read arbitrary files via unknown vectors. IBM notes the vulnerability exists in these products on all ...

Update on CVE assigned for Video Lead Form Plugin Cross-Site

Exploit Title : Video Lead Form Plugin Cross-Site Scripting Vulnerabilities which affects Wordpress URL Author: Aditya Balapure home: http://adityabalapure.blogspot.in/ Date: 24/11/12 version: 0.5 software link: http://wordpress.org/extend/plugins/video-lead-form/ CVE Assigned - CVE-2012-6312...

CVE-2012-6312

creationtimestamp| type| source ---|---|--- 2012-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38066...

SuSE 10 Security Update : Websphere Community Edition (ZYPP Patch Number 6312)

This update of WebSphere fixes the following vulnerabilities : - GERONIMO-3838: close potential denial of service attack - fix Apache Geronimo web administration console directory traversal vulnerabilities. CVE-2008-5518 - fix Apache Geronimo web administration console XSS vulnerabilities...