CVE-2016-8949

CVE-2016-8949 affects IBM Emptoris Supplier Lifecycle Management 10.0.x–10.1.1.x. A remote attacker could exploit an open redirect to spoof the URL and lure victims to a malicious site, enabling phishing and potential data exposure. IBM’s Security Bulletin for Emptoris SLM documents the vulnerabi...

HPE SiteScope contains multiple vulnerabilities

Overview HPE's SiteScope is vulnerable to several cryptographic issues, insufficiently protected credentials, and missing authentication. Description HPE's SiteScope is vulnerable to several vulnerabilities. The researcher reports that version 11.31.461 is affected; other versions may also be...

GLSA-201701-51 : DBD::mysql: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-51 DBD::mysql: Multiple vulnerabilities Multiple vulnerabilities have been discovered in DBD::mysql. Please review the CVE identifiers referenced below for details. Impact : An attacker could cause a Denial of Service...

Ubuntu 14.04 LTS : DBD::mysql vulnerabilities (USN-3103-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3103-1 advisory. It was discovered that DBD::mysql incorrectly handled certain memory operations. A remote attacker could use this issue to cause DBD::mysql to crash,...

USN-3103-1: DBD::mysql vulnerabilities

It was discovered that DBD::mysql incorrectly handled certain memory operations. A remote attacker could use this issue to cause DBD::mysql to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2014-9906 Hanno Böck discovered that DBD::mysql incorrectly handled certa...

CVE-2015-8949

CVE-2015-8949 is a use-after-free vulnerability in the MySQL driver for Perl (DBD::mysql) affecting versions before 4.033_01, triggered by a faulty path in the my_login flow that allows an unspecified impact. The issue is noted in multiple advisories and CVE lists, with references across NVD, Gen...

CVE-2015-8949

Use-after-free vulnerability in the mylogin function in DBD::mysql before 4.03301 allows attackers to have unspecified impact by leveraging a call to mysqlerrno after a failure of mylogin...

CVE-2015-8949

Use-after-free vulnerability in the mylogin function in DBD::mysql before 4.03301 allows attackers to have unspecified impact by leveraging a call to mysqlerrno after a failure of mylogin...

Fedora 23 : perl-DBD-MySQL (2016-bb0b94f8db)

Security fix for perl-DBD-MySQL Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora Update for perl-DBD-MySQL FEDORA-2016-bb0b94f8db

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : perl-DBD-MySQL (2016-4274c906e7)

Security fix for perl-DBD-MySQL Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

[SECURITY] [DSA 3635-1] libdbd-mysql-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3635-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2016 https://www.debian.org/security/faq -...

CVE-2014-8949

The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the i4wtrace parameter. NOTE: this can be leveraged with CVE-2014-8948 to allow remote attackers to execute code. NOTE: it is not clear...

CVE-2014-8949

The CVE-2014-8949 issue affects the WordPress iMember360 plugin versions 3.8.012–3.9.001. It allows remote authenticated administrators to execute arbitrary commands by injecting shell metacharacters into the i4w_trace parameter. Note that this can be combined with CVE-2014-8948 to enable code ex...

SuSE 11.3 Security Update : gnutls (SAT Patch Number 8949)

The GnuTLS library received a critical security fix and other updates : - The X.509 certificate verification had incorrect error handling, which could lead to broken certificates marked as being valid. CVE-2014-0092 - A verification problem in handling V1 certificates could also lead to V1...