Amazon Linux: Security Advisory (ALAS-2015-540)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NAP Turbo NAS Series Devices Music Station Directory Traversal Vulnerability

NAP Turbo NAS Series Devices is a backup software that supports real-time backup, data synchronization and scheduled backup. An input validation vulnerability exists in NAP Turbo NAS Series Devices Music Station, which could be exploited by remote attackers to submit a special request to view...

QNAP Logging Error Encryption Key Vulnerability

NAP Turbo NAS Series Devices is a storage device with software support for real-time backup, data synchronization and scheduled backup. NAP Turbo NAS Series Devices has a security vulnerability where the syslog encryption key is logged to an unencrypted hard disk partition and is globally readabl...

NAP Turbo NAS Series Devices CGI Arbitrary Code Execution Vulnerability

NAP Turbo NAS Series Devices is a backup software that supports real-time backup, data synchronization and scheduled backup. A security vulnerability in the NAP Turbo NAS Series Devices CGI allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code...

NAP Turbo NAS Series Devices 'Edit Account Profile' Cross-Site Scripting Vulnerability

NAP Turbo NAS Series Devices is a backup software that supports real-time backup, data synchronization and scheduled backup. An input validation vulnerability exists in the "Edit Account Profile" page of NAP Turbo NAS Series Devices, which can be exploited by remote attackers to inject malicious...

NAP Turbo NAS Series Devices 'Change Password' Function Elevation of Privilege Vulnerability

NAP Turbo NAS Series Devices is a backup software that supports real-time backup, data synchronization and scheduled backup. An unspecified vulnerability exists in the NAP Turbo NAS Series Devices "Change Password" function, which can be exploited by remote attackers to gain elevated privileges...

Amazon Linux AMI : libjpeg-turbo (ALAS-2015-540)

A flaw in libjpeg-turbo was reported that could lead to a local denial of service when processing a specially crafted JPEG issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2015-540...

Low: libjpeg-turbo

Issue Overview: A flaw in libjpeg-turbo was reported http://seclists.org/oss-sec/2014/q4/557 that could lead to a local denial of service when processing a specially-crafted JPEG issue. Affected Packages: libjpeg-turbo Issue Correction: Run yum update libjpeg-turbo or yum update --advisory...

SUSE SLED12 / SLES12 Security Update : libjpeg-turbo, libjpeg62-turbo (SUSE-SU-2015:0029-1)

libjpeg-turbo, libjpeg62-turbo were updated to fix one security issue. This security issue was fixed : - Passing special crafted jpeg file smashes stack CVE-2014-9092. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libjpeg-turbo package up to version 1.2.1 in the Gentoo Linux operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The multiple vulnerabilities in the libjpeg-turbo-static-1.2.1 package of the Red Hat Enterprise Linux operating system allow a malicious entity to compromise the confidentiality of protected information.

The libjpeg-turbo-static-1.2.1 package on the Red Hat Enterprise Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality of protected information

The multiple vulnerabilities in the libjpeg-turbo-debuginfo-1.2.1 package of the Red Hat Enterprise Linux operating system may lead to a violation of the confidentiality of protected information. Exploitation of these vulnerabilities can be carried out remotely...

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality of protected information

The libjpeg-turbo-debuginfo-1.2.1 package on the CentOS operating system has multiple vulnerabilities. Exploiting these vulnerabilities may lead to violations of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality of protected information

The libjpeg-turbo-1.2.1 package on the CentOS operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality of protected information

The multiple vulnerabilities in the libjpeg-turbo-devel-1.2.1 package for the Red Hat Enterprise Linux operating system may lead to a violation of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality of protected information

The libjpeg-turbo-devel-1.2.1 package on the CentOS operating system has multiple vulnerabilities. Exploiting these vulnerabilities may lead to a violation of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality of protected information

The libjpeg-turbo-static-1.2.1 package on the CentOS operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality of protected information

The libjpeg-turbo-1.2.1 package on the Red Hat Enterprise Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

QNAP Web Server Remote Code Execution

Exploit Title: QNAP Web server remote code execution via Bash Environment Variable Code Injection Date: 7 February 2015 Exploit Author: Patrick Pellegrino | [email protected] work / [email protected] other Employer homepage:...

QNAP admin shell via Bash Environment Variable Code Injection Exploit

Exploit for hardware platform in category remote exploits Exploit Title: QNAP admin shell via Bash Environment Variable Code Injection Date: 7 February 2015 Exploit Author: Patrick Pellegrino | email protected work / email protected other Employer homepage: http://www.securegroup.it Vendor...