Debian Security Advisory DSA 3394-1 (libreoffice - security update)

Multiple vulnerabilities have been discovered in LibreOffice, a full-featured office productivity: CVE-2015-4551Federico Scrinzi discovered an information leak in the handling of ODF documents. Quoting from https://www.libreoffice.org/about-us/security/advisories/cve-2015-4551/ : The LinkUpdateMo...

DSA-3394-1 libreoffice - security update

Bulletin has no description...

Xuzhou Huawei Information Technology Co., Ltd. electronic document management system contains file inclusion vulnerabilities

Xuzhou City, China Network Information Technology Co., Ltd. electronic document management system is to achieve the school's electronic documents such as electronic lesson plans, classroom materials, rules and regulations, management documents, audio-visual materials, photographs, etc.,...

jdk7-openjdk: multiple issues

CVE-2015-4734 information disclosure It was discovered that the JGSS component of OpenJDK did not properly hide Kerberos realm information from all error exceptions when running under Security Manager. An untrusted Java application or applet could use this flaw to obtain certain information about...

Apple iWork Memory Corruption Vulnerability (CNVD-2015-06782)

Apple iWork is an office software suite for OS X and iOS operating systems. A security vulnerability exists in Apple iWork versions prior to 2.6, Apple Pages versions prior to 5.6, Apple Keynote versions prior to 6.6, and Apple Numbers versions prior to 3.6. A remote attacker could exploit this...

CVE-2015-7032

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive information via a crafted document...

Adobe Acrobat Reader DC Media SaveAs Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Breaking: Edward Snowden Joins Twitter & Only Follows ‘NSA’

Whistleblower Edward Snowden just joined Twitter, and his first tweet seems to be directed at the US National Security Agency NSA. Yes, the world's most popular whistleblower and data privacy advocate has finally joined Twitter just two hours ago, and his first tweet came, “Can you hear me now?”...

The vulnerabilities of Microsoft Excel editors, the Microsoft Office Compatibility Pack, and the Microsoft Excel Viewer allow a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel editors, the Microsoft Office Compatibility Pack, and the Microsoft Excel Viewer are caused by buffer overflow attacks. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code using a specially crafted document...

openSUSE: Security Advisory for bash (openSUSE-SU-2014:1254-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SOL17236 - Apache HTTP server vulnerability CVE-2015-3185

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL460...

Ashley Madison's Company Secretly Running Online Escort Services — Leaked Documents Reveal

Yes, you heard right. Ashley Madison’s parent company Avid Life Media was secretly running an Online Escort Service, recently leaked documents revealed. Avid Life Media was allegedly actively recruiting escorts for a separate online "dating" website, aiming at "sugar daddies". Ashley Madison with...

Memphis Documents Library < 3.0 - Multiple Issues

- Remote File Inclusion - Local File Inclusion - XSS...

Design/Logic Flaw

Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing/renderer/printwebviewhelper.cc in Google Chrome before 45.0.2454.85 allow user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact by triggering nested IPC...

CVE-2015-1295

Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing/renderer/printwebviewhelper.cc in Google Chrome before 45.0.2454.85 allow user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact by triggering nested IPC...

CVE-2015-1295

Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing/renderer/printwebviewhelper.cc in Google Chrome before 45.0.2454.85 allow user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact by triggering nested IPC...

chromium-browser: Use-after-free in Printing

Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing/renderer/printwebviewhelper.cc in Google Chrome before 45.0.2454.85 allow user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact by triggering nested IPC...

SOL17212 - PHP vulnerability CVE-2014-5459

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

CVE-2015-6266

The guest portal in Cisco Identity Services Engine ISE 3300 1.20.899 does not restrict access to uploaded HTML documents, which allows remote attackers to obtain sensitive information from customized documents via a direct request, aka Bug ID CSCuo78045...

CVE-2015-6266

The guest portal in Cisco Identity Services Engine ISE 3300 1.20.899 does not restrict access to uploaded HTML documents, which allows remote attackers to obtain sensitive information from customized documents via a direct request, aka Bug ID CSCuo78045...