Mageia: Security Advisory (MGASA-2017-0249)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@sobotics/caching (1.1.1) potentially affected by CVE-2015-9545 via xdlocalstorage (2.0.5)

xdlocalstorage NPM version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on xdlocalstorage and may be impacted: - @sobotics/caching 1.1.1 Source cves: CVE-2015-9545 Source advisory: OSV:GHSA-76QM-4F93-FG6F...

CVE-2015-9545

creationtimestamp| type| source ---|---|--- 2020-04-07 22:48:18+00:00| seen| https://t.me/cibsecurity/11090...

CVE-2015-9545

The CVE-2015-9545 issue affects xdLocalStorage up to version 2.0.5, where receiveMessage() in xdLocalStorage.js does not validate the origin of web messages. This missing origin validation can allow remote attackers to entice a user to load a malicious site and exploit web messages to affect the ...

CVE-2020-9545

CVE-2020-9545 affects Pale Moon 28.x prior to 28.8.4. The vulnerability is a segmentation fault related to the module scripting subsystem, demonstrated by a Lacoste site. Multiple connected sources (NVD, Red Hat advisory references, and vendor records) confirm the same description. No root-cause ...

CVE-2019-9545

CVE-2019-9545 affects Poppler 0.74.0: a recursive call in JBIG2Stream::readTextRegion() (JBIG2Stream.cc) can be triggered by a crafted PDF (e.g., via pdfimages) to cause a Denial of Service (segfault) and potentially other impact related to JBIG2Bitmap::clearToZero. Connected advisories (OSV) con...

CVE-2018-9545

CVE-2018-9545 affects Android 9, with a local escalation of privilege due to an out-of-bounds write in BTA_HdRegisterApp (bta_hd_api.cc) caused by a missing bounds check. The issue enables a local attacker to potentially escalate privileges without user interaction. The vulnerability is documente...

Fedora Update for mpg123 FEDORA-2017-172410ec92

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mpg123 FEDORA-2017-c89d94d812

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated mpg123 packages fix security vulnerabilities

The nexttext function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service buffer over-read via a crafted mp3 file CVE-2017-9545. Invalid read of size 1 in ID3v2 parser due to forgotten offset from the frame flag bytes CVE-2017-10683. Extend pow tables for...

ALPINE-CVE-2017-9545

The nexttext function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service buffer over-read via a crafted mp3 file...

CVE-2017-9545

CVE-2017-9545 affects mpg123 1.24.0, where the next_text path in src/libmpg123/id3.c accepts crafted MP3s to trigger a denial of service via a buffer over-read. The Mageia MGASA-2017-0249 advisory explicitly lists CVE-2017-9545 with this cause, and Ubuntu USN-4806-1 (and Fedora updates) reference...

Fedora Update for java-1.6.0-openjdk FEDORA-2012-9545

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test Fedora Update for java-1.6.0-openjdk FEDORA-2012-9545 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...