Microsoft Edge CVE-2016-3296 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can take advantage of this vulnerability to execute arbitrary code in the context of the currently...

SUSE-SU-2016:0117-1 Security update for openssh-openssl1

This update for openssh-openssl1 fixes the following issues: - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature bsc961642 - CVE-2016-0778: A malicious or compromised server could could...

One Crucible admin can get access to repository password provided by another admin

It was possible to retrieve the repository passwords provided by another administrator via web browser session. It was fixed now, so password can still be changed or unset if necessary, but it is not possible to read its contents...

MGASA-2015-0086 Updated cabextract packages fix CVE-2015-2060

A directory traversal issue in cabextract allows writing to locations outside of the current working directory, when extracting a crafted cab file that encodes the filenames in a certain manner CVE-2015-2060...

MGASA-2014-0050 Updated darktable package fixes two vulnerabilities

Updated darktable package fixes security vulnerabilities: Darktable before version 1.2.3 contains an embedded copy of LibRaw that incorrectly handled photo files. If a user was tricked into processing a specially crafted photo file, darktable could be made to crash, resulting in a denial of servi...

Samsung Knox Vulnerable to Data Intercept

An Israeli security researcher from the Ben-Gurion University of the Negev’s Cyber Security Labs claims to have uncovered a serious security flaw in Samsung Knox. Knox is a security- and privacy-centric platform built into certain Samsung devices running Android. The Knox architecture, tailored f...

DSA-2822-1 xorg-server - integer underflow

Bulletin has no description...

DSA-2820-1 nspr - integer overflow

Bulletin has no description...

DSA-2767-1 proftpd-dfsg - denial of service

Bulletin has no description...

Cisco Unified IP Phone Local Kernel System Call Input Validation Vulnerability

Cisco Unified IP Phones 7900 Series versions 9.31SR1 and prior contain an arbitrary code execution vulnerability that could allow a local attacker to execute code or modify arbitrary memory with elevated privileges. This vulnerability is due to a failure to properly validate input passed to kerne...

DSA-2594-1 virtualbox-ose - programming error

Bulletin has no description...

DSA-2589-1 tiff - buffer overflow

Bulletin has no description...

JVN#05102851: Yome Collection for Android issue in management of IMEI

Yome Collection for Android contains an issue which stores the International Mobile Equipment Identity IMEI on a SD card. Applications without the READPHONESTATE permission may obtain the IMEI from the SD card. Impact If a user of the affected product uses a malicious Android application, the IME...

django -- cross-site scripting vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cisco IOS Software Input Access List Leakage with NAT - Cisco Systems

A group of related software bugs bug IDs given under "Software Versions and Fixes" create an undesired interaction between network address translation NAT and input access list processing in certain Cisco routers running 12.0-based versions of Cisco IOS software including 12.0, 12.0S, and 12.0T, ...

Crafted Packet Causes Reload on Cisco Routers

Cisco Routers running Internetwork Operating System IOS that supports Multi Protocol Label Switching MPLS are vulnerable to a Denial of Service DoS attack on interfaces where MPLS is not configured. A system that supports MPLS is vulnerable even if that system is not configured for MPLS. The...

DSA-2074-1 ncompress - execution of arbitrary code

Bulletin has no description...

DSA-1954-1 cacti - insufficient input sanitising

Bulletin has no description...

XSS vulnerability in recently updated and configure RSS feed actions

Our eSecurity team has identified a Cross Site Scripting issue with the confluence server as follows: Arbirtatry javascript can be injected in the following cases which can lead to escalated or invalid privileges being granted to an unauthorized user: 1...

Cisco Security Advisory: Cisco Unified Communications Manager Overflow Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Overflow Vulnerabilities Document ID: 92015 Advisory ID: cisco-sa-20070711-cucm http://www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtml Revision 1.0 For Public Release 2007 July 1...