32 matches found
CVE-2013-7470
cipsov4validate in include/net/cipsoipv4.h in the Linux kernel before 3.11.7, when CONFIGNETLABEL is disabled, allows attackers to cause a denial of service infinite loop and crash, as demonstrated by icmpsic, a different vulnerability than CVE-2013-0310...
CVE-2017-7470
CVE-2017-7470 : The issue affects Red Hat SUSE-managed Spacewalk infrastructure where the backend component spacewalk-channel (backend/server/rhnChannel.py) fails an authorization check, allowing a non-admin or disabled user to perform administrative tasks. Public references in the provided docum...
CVE-2016-7470
CVE-2016-7470 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
Security Bulletin: Multiple vulnerabilities have been identified in Jazz Reporting Service shipped with Rational Insight (CVE-2015-7464, CVE-2015-7467, CVE-2015-7468, CVE-2015-7469, CVE-2015-7470)
Summary Jazz Reporting Service is shipped as a component of Rational Insight. Information about multiple security vulnerabilities affecting Jazz Reporting Service has been published in a security bulletin. Vulnerability Details Consult the security bulletin Multiple security vulnerabilities affec...
Security Bulletin: Multiple security vulnerabilities affect the Report Builder that is shipped with Jazz Reporting Service (CVE-2015-7464, CVE-2015-7467, CVE-2015-7468, CVE-2015-7469, CVE-2015-7470)
Summary There are multiple security vulnerabilities in the Report Builder component shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2015-7464 DESCRIPTION: IBM Jazz Reporting Server JRS could allow an attacker that knows the URL of a Report Builder instance to perform an...
openSUSE Security Update : ImageMagick (openSUSE-2018-343)
This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2018-8804: The WriteEPTImage function allowed remote attackers to cause a denial of service double free and application crash or possibly have unspecified other impact via a crafted file bsc1086011. -...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:0857-1)
This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2018-8804: The WriteEPTImage function allowed remote attackers to cause a denial of service double free and application crash or possibly have unspecified other impact via a crafted file bsc1086011. -...
CVE-2018-7470
CVE-2018-7470 affects ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c can be triggered by a crafted WEBP file to cause a denial of service (segmentation fault). Public references describe a network-remote trigger and do not indicate exploitation status or patched versi...
SUSE SLES11 Security Update : SUSE Manager Client Tools (SUSE-SU-2017:1347-1)
The following security issue in spacewalk-backend has been fixed : - Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. bsc1026633, CVE-2017-7470 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network...
CVE-2015-7470
CVE-2015-7470 affects IBM Jazz Reporting Service (JRS) Report Builder in Rational Insight. Affected versions are JRS 5.0/5.0.1/5.0.2 and 6.0 prior to the indicated fixes. The vulnerability enables a man-in-the-middle attacker to obtain sensitive information (e.g., login information) via unspecifi...
CVE-2014-7470
The CVE-2014-7470 entry concerns the I Know the Movie Android app (com.guilardi.jesaislefilm2), specifically jesais_film_android_1.1. The vulnerability is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate...