openSUSE Security Update : qbittorrent (openSUSE-2017-381)

This update to qbittorrent 3.3.11 fixes the security issues and bugs. The following vulnerabilities were fixed : - CVE-2017-6504: WebUI did not set the X-Frame-Options header bsc1028073 - CVE-2017-6503: WebUI did not escape many values, allowing for XSS bsc1028072 %NASLMINLEVEL 70300 C Tenable...

Fedora 25 : 1:qbittorrent (2017-b59943dcae)

Fix CVE-2017-6503 and CVE-2017-6504 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

CVE-2017-6504

WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking...

CVE-2017-6504

CVE-2017-6504 affects the qBittorrent WebUI prior to 3.3.11, where the application did not set the X-Frame-Options header, potentially enabling clickjacking. Public details in the provided documents confirm the vulnerable component (WebUI), the condition (before 3.3.11), and the impact (clickjack...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2016:2453-1)

wireshark was updated to version 1.12.13 to fix the following issues : - CVE-2016-6504: wireshark: NDS dissector crash bnc991012 - CVE-2016-6505: wireshark: PacketBB dissector could divide by zero bnc991013 - CVE-2016-6506: wireshark: WSP infinite loop bnc991015 - CVE-2016-6507: wireshark: MMSE...

SUSE SLES11 Security Update : wireshark (SUSE-SU-2016:2212-1)

This update to wireshark 1.12.13 fixes the following issues : - CVE-2016-6504: wireshark: NDS dissector crash bsc991012 - CVE-2016-6505: wireshark: PacketBB dissector could divide by zero bsc991013 - CVE-2016-6506: wireshark: WSP infinite loop bsc991015 - CVE-2016-6507: wireshark: MMSE infinite...

[SECURITY] [DSA 3648-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3648-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 12, 2016 https://www.debian.org/security/faq -...

Wireshark Multiple Denial of Service Vulnerabilities-03 (Aug 2016) - Mac OS X

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openSUSE Security Update : wireshark (openSUSE-2016-947)

Wireshark was updated to 1.12.13 to fix a number of minor security issues and bugs. This release fixes a number issues in protocol dissectors that could have allowed a remote attacker to crash Wireshark or cause excessive CPU usage through specially crafted packages inserted into the network or a...

CVE-2016-6504

epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x before 1.12.13 does not properly maintain a ptvc data structure, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

CVE-2016-6504

CVE-2016-6504 affects Wireshark 1.12.x (before 1.12.13) via the NDS dissector’s incorrect maintenance of a ptvc data structure, allowing a crafted packet to cause a NULL pointer dereference and crash (denial of service). Related advisories note the issue alongside other dissector problems (Packet...

CVE-2016-6504

creationtimestamp| type| source ---|---|--- 2016-08-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40194...

SUSE: Security Advisory for java-1_7_0-openjdk (SUSE-SU-2014:1422-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2014-1636)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2014-1634)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2014-432)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3080-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3080-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3077-1] openjdk-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3077-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2014 http://www.debian.org/security/faq -...

CentOS 6 : java-1.8.0-openjdk (CESA-2014:1636)

Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

Updated java-1.7.0-openjdk packages fix security vulnerabilities

Multiple flaws were discovered in the Libraries, 2D, and Hotspot components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions CVE-2014-6506, CVE-2014-6531, CVE-2014-6502, CVE-2014-6511, CVE-2014-6504, CVE-2014-6519. It was...