CVE-2017-8369

CVE-2017-8369 affects IrfanView 4.44 (32-bit). The vulnerability arises from a Data from Faulting Address that controls branch selection during image viewing/thumbnailing (USER32!wvsprintfA+0x...); this can allow arbitrary code execution via a crafted file. Exploitation is noted as malware exists...

CVE-2016-8369

The CVE-2016-8369 entry affects Lynxspring JENEsys BAS Bridge versions 1.1.8 and older, with a Cross-Site Request Forgery (CSRF) vulnerability due to insufficient verification that user-submitted requests originated from the legitimate user. This could allow an attacker to perform actions with th...

Cacti <= 0.8.8f Multiple Vulnerabilities - Windows

Cacti is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

cacti: sql injection

CVE-2015-8604 sql injection SQL injection in graphsnew.php. - CVE-2015-8377 sql injection SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php. - CVE-2015-8369 sql injection SQL injection in graph.php...

[SECURITY] [DLA 374-3] cacti regression update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u13 CVE ID : CVE-2015-8369 Debian Bug : 807599 It was discovered that there was a regression in the patch intended to fix CVE-2015-8369 in the recent upload of cacti 0.8.7g-1+squeeze9+deb6u12. For Debian 6 Squeeze, this issue has been fixed in cacti...

[SECURITY] [DLA 374-2] cacti regression update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u12 It was discovered that there was a regression in the patch intended to fix CVE-2015-8369 in the recent upload of cacti 0.8.7g-1+squeeze9+deb6u11. For Debian 6 Squeeze, this issue has been fixed in cacti version 0.8.7g-1+squeeze9+deb6u12. Regards...

Debian DLA-374-3 : cacti regression update

It was discovered that there was a regression in the patch intended to fix CVE-2015-8369 in the recent upload of cacti 0.8.7g-1+squeeze9+deb6u12. For Debian 6 Squeeze, this issue has been fixed in cacti version 0.8.7g-1+squeeze9+deb6u13. NOTE: Tenable Network Security has extracted the preceding...

CVE-2015-8369

CVE-2015-8369 affects Cacti (0.8.8f and earlier). The SQL injection occurs in include/top_graph_header.php via the rra_id parameter used in a properties action to graph.php, allowing remote commands to interact with the database. Impact: arbitrary SQL execution with the app’s privileges. Mitigati...

[SECURITY] [DSA 3423-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3423-1 [email protected] https://www.debian.org/security/ Luciano Bello December 16, 2015 https://www.debian.org/security/faq -...

Oracle: Security Advisory (ELSA-2015-3014)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2015-0674)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2015-3013)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SOL16478 - Linux kernel vulnerabilities CVE-2014-8159 and CVE-2014-8369

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0034)

The remote OracleVM system is missing necessary patches to address critical security updates : - kvm: fix excessive pages un-pinning in kvmiommumap error path. Quentin Casasnovas Orabug: 20687313 CVE-2014-3601 CVE-2014-8369 CVE-2014-3601 - ttusb-dec: buffer overflow in ioctl Dan Carpenter Orabug:...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3013)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3013 advisory. - kvm: fix excessive pages un-pinning in kvmiommumap error path. Quentin Casasnovas Orabug: 20687313 CVE-2014-3601 CVE-2014-8369 CVE-2014-3601 -...

Oracle Linux 6 : kernel (ELSA-2015-0674)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0674 advisory. - infiniband core: Prevent integer overflow in ibumemget address arithmetic Doug Ledford 1181173 1179327 CVE-2014-8159 - fs splice: perform generic wri...

RHEL 6 : kernel (RHSA-2015:0674)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

kernel security and bug fix update

2.6.32-504.12.2 - infiniband core: Prevent integer overflow in ibumemget address arithmetic Doug Ledford 1181173 1179327 CVE-2014-8159 2.6.32-504.12.1 - fs splice: perform generic write checks Eric Sandeen 1163798 1155900 CVE-2014-7822 2.6.32-504.11.1 - virt kvm: excessive pages un-pinning in...

Ubuntu: Security Advisory (USN-2463-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2464-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...