Debian DLA-914-1 : minicom security update

CVE-2017-7467 Out of bounds write in vt100.c For Debian 7 'Wheezy', these problems have been fixed in version 2.6.1-1+deb7u1. We recommend that you upgrade your minicom packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory...

[SECURITY] [DLA 914-1] minicom security update

Package : minicom Version : 2.6.1-1+deb7u1 CVE ID : CVE-2017-7467 Debian Bug : 860940 CVE-2017-7467 Out of bounds write in vt100.c For Debian 7 "Wheezy", these problems have been fixed in version 2.6.1-1+deb7u1. We recommend that you upgrade your minicom packages. Further information about Debian...

SUSE SLED12 / SLES12 Security Update : minicom (SUSE-SU-2017:1092-1)

This update for minicom fixes the following issue: This security issue was fixed : - CVE-2017-7467: Invalid cursor coordinates and scroll regions could lead to code execution bsc1033783. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securi...

SUSE-SU-2017:1092-1 Security update for minicom

This update for minicom fixes the following issue: This security issue was fixed: - CVE-2017-7467: Invalid cursor coordinates and scroll regions could lead to code execution bsc1033783...

CVE-2016-7467

The CVE-2016-7467 issue affects F5 BIG-IP APM when the TMM SSO plugin is used as a SAML IdP with an SP connector. A malformed, signed SAML authentication request from an authenticated user can disrupt traffic or trigger failover. Affected versions include BIG-IP APM 12.0.0–12.1.1, 11.6.0–11.6.1 H...

F5 BIG-IP - TMM SSO plugin vulnerability CVE-2016-7467

Traffic may be disrupted or failover initiated when a malformed, signed SAML authentication request from an authenticated user is sent via SP connector on a BIG-IP configured as a SAML Identity Provider. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...

CVE-2015-7467

Cross-site scripting XSS vulnerability in Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-7467

The CVE-2015-7467 issue affects IBM Jazz Reporting Service (JRS) via the Report Builder component. Affected versions are JRS 5.x prior to 5.0.2-Rational-CLM-ifix011 and 6.0 prior to 6.0.0-Rational-CLM-ifix005. The root cause is cross-site scripting (XSS) due to improper validation of user-supplie...

CVE-2014-7467

The CVE-2014-7467 entry concerns the HoneyBee Mag Android app (com.magzter.honeybeemag) version 3.0, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The av...