Multiple packages, Multiple vulnerabilities fixed in 2010

Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. Insight Perl Tk Module...

Multiple packages, Multiple vulnerabilities fixed in 2012

Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. EGroupware VTE Layer Four...

docker: Path traversal and spoofing opportunities presented through image identifiers

Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a 1 "docker load" operation or 2 "registry communications."...

UBUNTU-CVE-2014-4883

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

RHEL 6 : rhev-hypervisor6 (RHSA-2011:1850)

An updated rhev-hypervisor6 package that fixes one security issue and two bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

RHEL 5 : java-1.4.2-ibm-sap (RHSA-2012:1080)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1080 advisory. - OpenJDK: JavaSound incorrect bounds check Sound, 7088367 CVE-2011-3563 - Oracle JDK: unspecified vulnerability fixed in 6u31 and 7u3 2D...

GLSA-201411-02 : MySQL, MariaDB: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201411-02 MySQL, MariaDB: Multiple vulnerabilities Multiple unspecified vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could exploit these...

MySQL, MariaDB: Multiple vulnerabilities

Background MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL. Description Multiple unspecified vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details. Impact A remote attacker coul...

PT-2014-3534

Name of the Vulnerable Software and Affected Versions OpenStack Identity Keystone versions prior to 2014.1.1 Description The issue arises from improper handling of role assignments to groups with IDs identical to those of users, allowing remote authenticated users to gain privileges assigned to a...

Verizon Wireless Injects Identifiers to Track Mobile Customers’ Online Activities

The Nation's largest telecom operator 'Verizon Wireless' is tracking its customers' mobile internet traffic by adding a token to Web requests traveling over its network, in order to facilitate targeted advertising even if a user has opted out of their Customer Proprietary Network Information CPNI...

CVE-2014-7228

creationtimestamp| type| source ---|---|--- 2014-10-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35033 2018-05-24 15:44:33+00:00| seen| MISP/5b06d57d-f2b8-4357-9038-45d39f590eb0 2018-05-29 15:50:33+00:00| seen|...

Remote code execution

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse internationalized resource identifiers, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted request to a .NET web application, aka ".NET...

Microsoft .NET Framework Remote Code Execution Vulnerability (3000414)

This host is missing a critical security update according to Microsoft Bulletin MS14-057. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2014-4114

creationtimestamp| type| source ---|---|--- 2014-10-14 10:29:22+00:00| seen| MISP/543cfad1-5780-4e69-b6de-474f950d210b 2014-10-14 11:40:40+00:00| seen| MISP/543d042c-3504-42d2-b2ef-44c6950d210b 2014-10-14 14:18:05+00:00| seen| MISP/543d0bd9-02d8-43b1-9feb-4286950d2109 2014-10-20 00:00:00+00:00|...

PT-2014-1665

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 2.0 SP2 through 4.5.2 Description A remote code execution issue exists due to the improper handling of internationalized resource identifiers. This allows an attacker to gain complete control over the system,...

Microsoft .NET Framework Remote Code Execution (MS14-057; CVE-2014-4121)

A remote code execution vulnerability has been reported in the Microsoft .NET Framework. The vulnerability is due to the way .NET framework parses internationalized resource identifiers. A remote attacker could exploit this vulnerability by sending specially crafted data to the target server that...

CA20141001-01: Security Notice for Bash Shellshock Vulnerability

CA20141001-01: Security Notice for Bash Shellshock Vulnerability Issued: October 01, 2014 Updated: October 03, 2014 CA Technologies is investigating multiple GNU Bash vulnerabilities, referred to as the "Shellshock" vulnerabilities, which were publicly disclosed on September 24-27, 2014. CVE...

Wireshark: Multiple vulnerabilities

Background Wireshark is a network protocol analyzer formerly known as ethereal. Description Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact A remote attacker can cause a Denial of Service condition via specially...

OpenOffice, LibreOffice: Multiple vulnerabilities

Background OpenOffice is the open source version of StarOffice, a full office productivity suite. LibreOffice is a fork of OpenOffice. Description Multiple vulnerabilities have been discovered in OpenOffice and Libreoffice. Please review the CVE identifiers referenced below for details. Impact A...