CVE-2016-6500

CVE-2016-6500 affects ForgeRock OpenIDM and OpenICF, specifically the RACF Connector component prior to version 1.1.1.0. The underlying issue is an improper call to the SearchControls constructor with returnObjFlag set to true, which enables an attacker to trigger arbitrary code execution by send...

ownCloud Information Exposure Vulnerability (Sep 2016) - Linux

ownCloud is prone to an information exposure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

Oracle MySQL Server <= 5.5.39 / 5.6 <= 5.6.20 Security Update (cpuoct2014) - Linux

Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco ASA DNS DoS Vulnerability (cisco-sa-20151021-asa-dns2)

A vulnerability in the DNS code of Cisco ASA may lead to a denial of service. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

Cisco ASA DNS DoS Vulnerability (cisco-sa-20151021-asa-dns1)

A vulnerability in the DNS code of Cisco ASA may lead to a denial of service. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

CVE-2015-6500

Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory contents and possibly cause a denial of service CPU consumption via a .. dot dot in the dir parameter to index.php/apps/files/ajax/scan.php...

CVE-2015-6500

CVE-2015-6500 is a directory traversal vulnerability in ownCloud Server prior to 8.0.6 and in the 8.1.x branch prior to 8.1.1. It allows remote authenticated users to list directory contents and potentially cause a denial of service (CPU consumption) by sending a .. payload to index.php/apps/file...

[SECURITY] [DSA 3373-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq...

[SECURITY] [DSA 3373-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3373-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq -...

Mageia: Security Advisory (MGASA-2015-0378)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0771

The CVE-2015-0771 issue affects Cisco Catalyst 6500 Series Switches (WS-IPSEC-3 service module) running Cisco IOS 12.2. The root cause is insufficient bounds checks on a specific IKE message during IPsec tunnel establishment, which can be exploited by an authenticated remote attacker to trigger a...

CVE-2015-0771

The IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500 devices allows remote authenticated users to cause a denial of service device reload by sending a crafted message during IPsec tunnel setup, aka Bug ID CSCur70505...

Cisco Catalyst 6500 Series Switches Denial of Service Vulnerability

The Cisco Catalyst 6500 Series Switches are a set of 6500 series switch products. A denial of service vulnerability exists in the Cisco Catalyst 6500 Series Switches that could allow a remote attacker to submit a special request to reload the switch, resulting in a denial of service attack...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2015:0743-1)

mariadb was updated to version 10.0.16 to fix 40 security issues. These security issues were fixed : - CVE-2015-0411: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allowed remote attackers to affect confidentiality, integrity, and availability via...

[slackware-security] mariadb

New mariadb packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mariadb-5.5.40-i486-1slack14.1.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

Important: mysql55

Issue Overview: Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: SERVER:SSL:yaSSL. Supported versions that are affected are 5.5.39 and earlier and 5.6.20 and earlier. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols...

CVE-2014-6500

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491...

CVE-2014-6500

CVE-2014-6500 is an Oracle MySQL Server vulnerability affecting 5.5.39 and earlier and 5.6.20 and earlier, exploitable remotely via the SERVER:SSL:yaSSL vector with partial confidentiality, integrity, and availability impact. Multiple connected sources confirm this issue alongside CVE-2014-6491 a...

CVE-2014-6500

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491...