openSUSE Security Update : webkit2gtk3 (openSUSE-2019-2591)

This update for webkit2gtk3 to version 2.26.2 fixes the following issues : Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed : - CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead...

openSUSE Security Update : webkit2gtk3 (openSUSE-2019-2587)

This update for webkit2gtk3 to version 2.26.2 fixes the following issues : Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed : - CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:3044-1)

This update for webkit2gtk3 to version 2.26.2 fixes the following issues : Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed : CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead t...

About the security content of iCloud for Windows 7.14

About the security content of iCloud for Windows 7.14 This document describes the security content of iCloud for Windows 7.14. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of iTunes 12.10.1 for Windows

About the security content of iTunes 12.10.1 for Windows This document describes the security content of iTunes 12.10.1 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

KLA11592 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, cause denial of service. Below is a complete list of vulnerabilities: 1. Vulnerabilitiy in WebKit can be exploited remotely via...

CVE-2018-8764

Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the sectoken parameter of a URI, which makes it easier for remote attackers to defeat a CSRF protection mechanism by leveraging logging...

CVE-2018-8764

CVE-2018-8764 affects LDAP Account Manager (Roland Gruber Softwareentwicklung) prior to 6.3. The flaw exposes the CSRF token in the sec_token parameter of a URI, enabling an attacker to bypass CSRF protection by leveraging logging and potentially perform unauthorized actions in a logged-in sessio...

CVE-2016-8764

The CVE-2016-8764 issue concerns Huawei devices where the TrustZone driver contains an input validation vulnerability that can allow an attacker to read and write user-mode memory data anywhere inside the TrustZone driver. Affected products include Huawei P9 (versions earlier than EVA-AL10C00B352...

CVE-2015-8764

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow...

CVE-2015-8764

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow...

CVE-2015-8764

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow...

CVE-2015-8764

CVE-2015-8764 affects the FreeRADIUS EAP-PWD module. An off-by-one error in FreeRADIUS 3.0 through 3.0.8 triggers a buffer overflow. The connected documents consistently describe this as the vulnerability class and version range; no exploitation or mitigation details are provided in the supplied ...

CVE-2015-8764

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow...

Security Advisory - Multiple Security Vulnerabilities in Huawei Smart Phone Products

The TrustZone driver of some Huawei smart phone products has an input validation vulnerability. An attacker may trick the target user into installing a malicious APP which could exploit this vulnerability to pass specific parameters to the TrustZone driver. Successful exploit could cause the syst...

[ MDVSA-2015:185 ] dokuwiki

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:185 http://www.mandriva.com/en/support/security/ Package : dokuwiki Date : March 31, 2015 Affected: Business Server 1.0 Problem Description: Updated dokuwiki packages fix security vulnerabilities:...

Symantec Endpoint Protection Manager Detection

Binary data 8764.prm...

Debian DLA-79-1 : dokuwiki security update

This fixes a possibility of bypassing the wiki authentication when an Active Directory is used for LDAP authentication. These two CVE are almost the same, one apparently being a superset of the other. They are fixed together. CVE-2014-8763 DokuWiki before 2014-05-05b, when using Active Directory...

[SECURITY] [DSA 3059-1] dokuwiki security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3059-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 79-1] dokuwiki security update

Package : dokuwiki Version : 0.0.20091225c-10+squeeze3 CVE ID : CVE-2014-8763 CVE-2014-8764 Debian Bug : 766545 This fixes a possibility of bypasswing the wiki authentication when an Active Directory is used for LDAP authentication. These two CVE are almost the same, one apparently being a supers...