28 matches found
Schneider Electric Magelis HMI Resource Consumption Vulnerabilities (Update B)
OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-308-02A Schneider Electric Magelis HMI Resource Consumption Vulnerabilities that was published November 22, 2016, on the NCCIC/ICS-CERT web site. ICS-CERT is aware of a public report of resource consumption...
Schneider Electric Magelis HMI Advanced Panel Remote Denial Of Service (CVE-2016-8367; CVE-2016-8374)
A denial of service vulnerability exists in Schneider Electric Magelis HMI Advanced Panel, AKA Panelshock. The vulnerability is due to insufficient validation of incoming requests. A remote attacker can exploit this vulnerability by enticing an authenticated user to view crafted web content. This...
Fedora 22 : LibRaw-0.16.2-3.fc22 (2015-a288773b9a)
Patch for CVE-2015-8366, CVE-2015-8367 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
Fedora 23 : LibRaw-0.16.2-3.fc23 (2015-d2fc332108)
Patch for CVE-2015-8366, CVE-2015-8367 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
openSUSE Security Update : libraw (openSUSE-2015-900)
This update fixes the following security issue : - CVE-2015-8367 - It was found that phaseonecorrect function does not handle memory objects initialization correctly, which may have unspecified impact bsc957517. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
CVE-2015-8367
The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...
CVE-2014-8367
Aruba Networks ClearPass Policy Manager (CPPM) is affected by a SQL injection vulnerability (CVE-2014-8367) in versions 6.2.x, 6.3.x prior to 6.3.6, and 6.4.x prior to 6.4.2. The issue permits remote attackers to execute arbitrary SQL commands via unspecified vectors. The available sources (NVD/N...