Medium: php54

Issue Overview: PHP process crashes when processing an invalid file with the "phar" extension. CVE-2015-5589 As discussed upstream https://bugs.php.net/bug.php?id=69669, mysqlnd is vulnerable to the attack described in https://www.duosecurity.com/blog/backronym-mysql-vulnerability. CVE-2015-3152...

CVE-2014-6831

The CVE-2014-6831 issue affects the Hippo Studio Android app (com.appgreen.hippostudio) 1.0, where SSL/TLS certificate verification is not performed when connecting to HTTPS servers. This weakens trust in server identity and allows MITM attackers to spoof servers and access sensitive information ...

CVE-2013-6831

CVE-2013-6831 affects PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms. The sudoers configuration allows local users to gain privileges via a sudo command that leverages access to the qmailq account. The provided connected documents corroborate the affected product/version and...

SuSE 11.2 Security Update : dhcp (SAT Patch Number 6831)

This update to ISC dhcp-4.2.4-P2 release provides a security fix for an issue with the use of lease times. Making certain changes to the end time of an IPv6 lease could cause the server to abort. Thanks to Glen Eustace of Massey University, New Zealand for finding this issue. CVE-2012-3955 has be...

CVE-2008-6831

The CVE-2008-6831 entry describes multiple cross-site scripting (XSS) vulnerabilities in Atlassian Jira Enterprise Edition 3.13, allowing remote attackers to inject arbitrary script or HTML via the fullname parameter on the ViewProfile page or the returnUrl parameter in a form (secure/AddComment)...