Security update for libopenmpt (moderate)

openSUSE Security Update: Security update for libopenmpt Announcement ID: openSUSE-SU-2021:1914-1 Rating: moderate References: 1186663 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for libopenmpt fixes the following...

CVE-2020-28072

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE...

Exploit for Improper Handling of Exceptional Conditions in Google Android

ServiceCheater CVE-2020-0113 & CVE-2020-0108 Analysis o...

ams.cmu.ac.th Cross Site Scripting vulnerability OBB-1211287

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2018-14804

Affected product: Emerson AMS Device Manager (versions 12.0–13.5). Vulnerability CVE-2018-14804 allows arbitrary remote code execution via a specially crafted script due to improper access control. Impact: potential remote code execution with high severity (ICS context). Mitigation: apply patches...

CVE-2018-14804

Emerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows arbitrary remote code execution...

CVE-2018-14808

Emerson AMS Device Manager (AMS DM) versions 12.0–13.5 are affected by CVE-2018-14808 (CWE-269). The root cause is improper privilege management, allowing non-administrative users to overwrite or modify executable and library files, potentially impacting integrity and availability as per NVD/ICS ...

CVE-2018-14808

Emerson AMS Device Manager v12.0 to v13.5. Non-administrative users are able to change executable and library files on the affected products...

CVE-2018-14808

Emerson AMS Device Manager v12.0 to v13.5. Non-administrative users are able to change executable and library files on the affected products...

CVE-2018-14804

Emerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows arbitrary remote code execution...

Input validation

Emerson AMS Device Manager v12.0 to v13.5. Non-administrative users are able to change executable and library files on the affected products...

CVE-2018-14804

Emerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows arbitrary remote code execution...

Remote code execution

Emerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows arbitrary remote code execution...

CVE-2018-14808

Emerson AMS Device Manager v12.0 to v13.5. Non-administrative users are able to change executable and library files on the affected products...

Emerson AMS Device Manager

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Emerson Equipment: AMS Device Manager Vulnerabilities: Improper Access Control, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow...

openSUSE Security Update : libopenmpt (openSUSE-2018-742)

This update for libopenmpt to version 0.3.9 fixes the following issues : These security issues were fixed : - CVE-2018-11710: Prevent write near address 0 in out-of-memory situations when reading AMS files bsc1095644 - CVE-2018-10017: Preven out-of-bounds memory read with IT/ITP/MO3 files...

c-ams.co.uk Improper Access Control vulnerability

Open Bug Bounty ID: OBB-635300 Description| Value ---|--- Affected Website:| c-ams.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Security Bulletin: Potential security vulnerability in IBM WebSphere Application Server in Bluemix MQ JCA Resource adapter (CVE-2016-0360)

Summary There is a potential security vulnerability with the WebSphere Application Server MQ JCA Resource adapter. Vulnerability Details CVEID: CVE-2016-0360 DESCRIPTION: IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources whi...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM MQ AMS (CVE-2015-3194, CVE-2015-3195, CVE-2015-3196)

Summary OpenSSL vulnerabilities were disclosed on December 3, 2015 by the OpenSSL Project. OpenSSL is used by IBM MQ Advanced Message Security AMS on IBM i. IBM MQ has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-3194 DESCRIPTION: OpenSSL is vulnerable to a denial of...

libopenmpt Denial of Service Vulnerability

libopenmpt is a cross-platform audio playback library based on C and C++. A security vulnerability exists in the soundlib/pattern.h file in versions of libopenmpt prior to 0.3.9. A remote attacker can exploit this vulnerability to cause a denial of service application crash with the help of a...