9806 matches found
CVE-2016-9085
Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors...
IT Threat GeoDashboard: Suspicious
IT Threat GeoDashboard Suspicious is a combination of Open Source software configured to give end users a view on IT threats over an interactive geographical dashboard. You’ll just need an Internet Browser to access the dashboard. This application has been build on a GNU/Linux environment and may...
Exim Information Disclosure Vulnerability
Exim is an open source messaging agent MTA developed by the University of Cambridge in the UK that runs on Unix systems and is responsible for routing, forwarding and delivering mail. Exim suffers from an information disclosure vulnerability. An attacker can exploit this issue to obtain potential...
GNU Bourne-Again Shell (Bash) 'Shellshock' - Lenovo Support US
No description provided...
EKG Gadu 1.9~pre+r2855-3+b1 Local Buffer Overflow
Exploit developed using Exploit Pack v6.01 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: EKG Gadu Affected value: USERNAME Version: 1:1.9pre+r2855-3+b1 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description:...
EKG Gadu 1.9~pre+r2855-3+b1 - Local Buffer Overflow
Exploit developed using Exploit Pack v6.01 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: EKG Gadu Affected value: USERNAME Version: 1:1.9pre+r2855-3+b1 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description:...
Lynis 2.3.0 - Security Auditing Tool for Unix/Linux Systems
We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...
libxml2: Out-of-bounds memory access
A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash...
JDK: buffer overflow vulnerability in the IBM JVM
Buffer overflow in the Java Virtual Machine JVM in IBM SDK, Java Technology Edition 6 before SR16 FP25 6.0.16.25, 6 R1 before SR8 FP25 6.1.8.25, 7 before SR9 FP40 7.0.9.40, 7 R1 before SR3 FP40 7.1.3.40, and 8 before SR3 8.0.3.0 allows remote attackers to execute arbitrary code via unspecified...
[SECURITY] Fedora 23 Update: exim-4.86.2-1.fc23
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
PolicyKit Elevation of Privilege Vulnerability
PolicyKit a.k.a. Polkit is a tool from Red Hat, Inc. for controlling application privileges on Unix-compatible systems. An elevation of privilege vulnerability exists in versions of PolicyKit prior to 0.113. It allows a local user to gain privileges by repeatedly manipulating Id...
mod_jk: information leak due to incorrect JkMount/JkUnmount directives processing
It was discovered that a JkUnmount rule for a subtree of a previous JkMount rule could be ignored. This could allow a remote attacker to potentially access a private artifact in a tree that would otherwise not be accessible to them...
mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015)
Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer...
Lynis 2.1.1 - Security Auditing Tool for Unix/Linux Systems
Lynis is an open source security auditing tool. Commonly used by system administrators, security professionals and auditors, to evaluate the security defenses of their Linux/Unix based systems. It runs on the host itself, so it can perform very extensive security scans. Supported operating system...
php: integer overflow leading to heap overflow when reading FTP file listing
An integer overflow flaw leading to a heap-based buffer overflow was found in the way PHP's FTP extension parsed file listing FTP server responses. A malicious FTP server could use this flaw to cause a PHP application to crash or, possibly, execute arbitrary code...
node, iojs, and v8 -- denial of service
node reports: This release of Node.js fixes a bug that triggers an out-of-band write in V8's utf-8 decoder. This bug impacts all Buffer to String conversions. This is an important security update as this bug can be used to cause a denial of service attack...
php: buffer over-read in Phar metadata parsing
A buffer over-read flaw was found in PHP's phar PHP Archive paths implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory...
OSSEC 2.7 2.8.1 - diff Local Privilege Escalation
OSSEC 2.7 2.8.1 - diff Local Privilege Escalation Fix for CVE-2015-3222 which allows for root escalation via syscheck - https://github.com/ossec/ossec-hids/releases/tag/2.8.2 Affected versions: 2.7 - 2.8.1 Beginning is OSSEC 2.7 d88cf1c9 a feature was added to syscheck, which is the daemon that...
IT-Grundschutz M4.026: Regelmäßiger Sicherheitscheck des Unix-Systems
IT-Grundschutz M4.026: Regelmäßiger Sicherheitscheck des Unix-Systems. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4026.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.026 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networ...
IT-Grundschutz M4.026: Regelmaessiger Sicherheitscheck des Unix-Systems
IT-Grundschutz M4.026: Regelmaessiger Sicherheitscheck des Unix-Systems. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...