1074 matches found
Samba Unicode Filename Buffer Overflow (CVE-2004-0882)
A vulnerability has been reported in the way Samba handles file information requests. A malformed request can trick the server into overflowing an incorrectly allocated buffer while generating a response. If certain conditions are met, an attacker can exploit this vulnerability to execute malicio...
F5 BIG-IP - Multiple PHP CDF vulnerabilities CVE-2014-0237 and CVE-2014-0238
The remote host is missing a security patch. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...
MS15-102: Description of the security update for Windows Task Management: September 8, 2015 (KB3082089)
None None...
Cumulative update for Windows 10: September 8, 2015
Describes the September 8, 2015, update for Windows 10.SummaryThis update for Windows 10 includes functionality improvements and resolves the vulnerabilities in Windows that are described in the following Microsoft security bulletins:Microsoft Security Bulletin MS15-094Microsoft Security Bulletin...
Amazon Linux: Security Advisory (ALAS-2014-451)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco Edge 340 Series Digital Media Player File Viewing Vulnerability
The Cisco Edge 340 Series Digital Media Player is a digital media playback application device. A security vulnerability exists in the Cisco Edge 340 Series Digital Media Player that allows a remote, authenticated user to configure the export function using the WEB graphical user interface to view...
MS15-083: Vulnerability in Server Message Block could allow remote code execution: August 11, 2015
None None...
MS15-069: Description of the security update for Windows: July 14, 2015 (KB3061512)
None None...
MS15-069: Description of the security update for Windows: July 14, 2015 (KB3070738)
None None...
php: denial of service when processing a crafted file with Fileinfo
The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service application crash or possibly...
Important: Red Hat Security Advisory: rh-php56-php security update
Updated rh-php56-php packages that fix multiple security issues are now available for Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
php: denial of service when processing a crafted file with Fileinfo
The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service application crash or possibly...
UBUNTU-CVE-2015-4605
The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service application crash or possibly execute...
Microsoft security advisory: Update for vulnerability in Juniper Networks Windows In-Box Junos Pulse client: June 9, 2015
None None...
Moderate: Red Hat Security Advisory: php55 security and bug fix update
Updated php55 collection packages that fix multiple security issues and several bugs are now available as part of Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...
file: out of bounds read in mconvert()
An ouf-of-bounds read flaw was found in the way the file utility processed certain Pascal strings. A remote attacker could cause an application using the file utility for example, PHP using the fileinfo module to crash if it was used to identify the type of the attacker-supplied file...
php: denial of service when processing a crafted file with Fileinfo
The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service application crash or possibly execute...
Wesnoth File Information Disclosure Vulnerability
The Battle For Wesnoth is an open source, cross-platform, free-to-play turn-based strategy game. A file information disclosure vulnerability exists in Wesnoth. This vulnerability can be exploited by attackers to obtain sensitive information...
MS15-035: Vulnerability in Microsoft graphics component could allow remote code execution: April 14, 2015
None None...
CVE-2015-1648: Undefined Security Weakness
ASP.NET in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, when the customErrors configuration is disabled, allows remote attackers to obtain sensitive configuration-file information via a crafted request, aka "ASP.NET Information Disclosure Vulnerability."...