DEBIAN-CVE-2017-16667

backintime aka Back in Time before 1.1.24 did improper escaping/quoting of file paths used as arguments to the 'notify-send' command, leading to some parts of file paths being executed as shell commands within an os.system call in qt4/plugins/notifyplugin.py. This could allow an attacker to craft...

Digia Qt Buffer Overflow Vulnerability

qBittorrent is a cross-platform lightweight BitTorrent client. keepltSafe SugarSync is a suite of cloud storage products for backing up, accessing, and sharing users' files from KeepltSafe in the U.S.A. Digia Qt is, among other things, a cross-platform C++ application development framework from...

CVE-2017-15011

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service application crash via an unspecified string...

CVE-2017-15011

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service application crash via an unspecified string...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service application crash via an unspecified string...

CVE-2017-15011: Improper Restriction of Operations within the Bounds of a Memory Buffer

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service application crash via an unspecified string...

CVE-2017-15011

The CVE concerns the named pipes feature in qtsingleapp (Qt 5.x), used by qBittorrent and SugarSync. Connected sources indicate these named pipes are configured for remote access, allowing remote attackers to trigger a denial of service (application crash) by providing an unspecified string. The ...

Design/Logic Flaw

Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow remote attackers to execute arbitrary code...

CVE-2015-1329

Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow remote attackers to execute arbitrary code...

CVE-2015-1329

The CVE-2015-1329 issue affects oxide-qt (Ubuntu 15.04 and 14.04 LTS). The root cause is a use-after-free in oxide::qt::URLRequestDelegatedJob, which may allow remote code execution in the context of the affected browser engine. Impact is remote code execution with the user’s privileges and high ...

CVE-2015-1329: Use After Free

Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow remote attackers to execute arbitrary code...

PT-2020-7840

Name of the Vulnerable Software and Affected Versions: bitcoind and Bitcoin-Qt versions prior to 0.10.2 Description: The issue allows attackers to cause a denial of service, resulting in disabled functionality such as a client application crash, via an "Easy" attack. Recommendations: For versions...

[SECURITY] Fedora 26 Update: wireshark-2.2.8-1.fc26

Metapackage with installs wireshark-cli and wireshark-qt...

Design/Logic Flaw

The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted website...

CVE-2015-1332

The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted website...

CVE-2015-1332

CVE-2015-1332 describes a heap corruption in oxide::JavaScriptDialogManager within oxide-qt. Affected: Ubuntu 15.04 and 14.04 packaged oxide-qt core library. Impact per advisories: denial of service via renderer crash and potential arbitrary code execution when visiting a crafted website. Remedia...

CVE-2015-1332

The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted website...

CowerSnail, from the creators of SambaCry

We recently reported about SambaCry, a new family of Linux Trojans exploiting a vulnerability in the Samba protocol. A week later, Kaspersky Lab analysts managed to detect a malicious program for Windows that was apparently created by the same group responsible for SambaCry. It was the common C&C...

CVE-2015-1332: Improper Restriction of Operations within the Bounds of a Memory Buffer

The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted website...

Fedora 24 : qt5-qtwebengine (2017-98bed96d12)

This update updates QtWebEngine to a snapshot from the Qt 5.6 LTS long-term support branch. This is a snapshot of the QtWebEngine that will be included in the bugfix and security release Qt 5.6.3, but only the QtWebEngine component is included in this update. The update fixes the following securi...