62 matches found
SUSE SLES12 Security Update : php5 (SUSE-SU-2016:2408-1)
This update for php5 fixes the following security issues : - CVE-2016-6128: Invalid color index not properly handled bsc987580 - CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032 - CVE-2016-6292: NULL pointer dereference in exifprocessusercomme...
CVE-2017-7127
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. iCloud before 7.0 on Windows is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "SQLite" component. It allows attackers to execute arbitrary cod...
CVE-2017-7127
CVE-2017-7127 concerns a flaw in the SQLite component used by multiple Apple platforms. Affected products/targets are: iOS < 11, macOS < 10.13, iCloud for Windows < 7.0, tvOS < 11, and watchOS
CVE-2015-7127
CVE-2015-7127 is rejected/not used and does not represent an active vulnerability entry.
[SECURITY] [DSA 3689-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3689-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 08, 2016 https://www.debian.org/security/faq -...
SUSE SLES11 Security Update : php53 (SUSE-SU-2016:2459-1)
This update for php53 fixes the following security issues : - CVE-2016-7124: Create an Unexpected Object and Don't Invoke wakeup in Deserialization - CVE-2016-7125: PHP Session Data Injection Vulnerability - CVE-2016-7126: selectcolors write out-of-bounds - CVE-2016-7127: imagegammacorrect allowe...
Ubuntu 14.04 LTS / 16.04 LTS : PHP vulnerabilities (USN-3095-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3095-1 advisory. Taoguang Chen discovered that PHP incorrectly handled certain invalid objects when unserializing data. A remote attacker could use this issue...
Ubuntu: Security Advisory (USN-3095-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for php5 (important)
This update for php5 fixes the following security issues: CVE-2016-6128: Invalid color index not properly handled bsc987580 CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032 CVE-2016-6292: Null pointer dereference in exifprocessusercomment...
openSUSE Security Update : php5 (openSUSE-2016-1095)
This update for php5 fixes the following security issues : - CVE-2016-7124: Create an Unexpected Object and Don't Invoke wakeup in Deserialization - CVE-2016-7125: PHP Session Data Injection Vulnerability - CVE-2016-7126: selectcolors write out-of-bounds - CVE-2016-7127: imagegammacorrect allowed...
openSUSE: Security Advisory for php5 (openSUSE-SU-2016:2337-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for php5 (important)
This update for php5 fixes the following security issues: CVE-2016-7124: Create an Unexpected Object and Don't Invoke wakeup in Deserialization CVE-2016-7125: PHP Session Data Injection Vulnerability CVE-2016-7126: selectcolors write out-of-bounds CVE-2016-7127: imagegammacorrect allowed arbitrar...
SUSE SLES11 Security Update : php53 (SUSE-SU-2016:2328-1)
This update for php53 fixes the following security issues : - CVE-2014-3587: Integer overflow in the cdfreadpropertyinfo affecting SLES11 SP3 bsc987530 - CVE-2016-6297: Stack-based buffer overflow vulnerability in phpstreamzipopener bsc991426 - CVE-2016-6291: Out-of-bounds access in...
CVE-2016-7127
CVE-2016-7127 describes a flaw in PHP where the imagegammacorrect function (ext/gd/gd.c) does not properly validate gamma values. This can allow a remote attacker to trigger an out-of-bounds write, causing a denial of service, by supplying different signs for the second and third arguments. Affec...
PHP < 5.6.25, 7.x < 7.0.10 Multiple Vulnerabilities (Sep 2016) - Linux
PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...
CVE-2014-7127
The CVE-2014-7127 entry concerns the Football Espana Android app (com.triactivemedia.footballespana). The vulnerability is that the app does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted cer...
CVE-2013-7127
Apple Safari 6.0.5 on Mac OS X 10.7.5/10.8.5 is affected by CVE-2013-7127, a local information-disclosure vulnerability in which cleartext credentials are stored in LastSession.plist. The root cause is the insecure storage of sensitive data in LastSession.plist, enabling a local user to read cred...
CVE-2008-7127
CVE-2008-7127 affects Borland VisiBroker Smart Agent prior to 08.00.00.C1.03. A remote attacker can crash the service by sending a crafted UDP packet to port 14000, triggering a memory allocation failure. The NVD entry confirms the vulnerability pattern and impact as a denial of service. No remed...
