DLA-759-1 nss - security update

Bulletin has no description...

PT-2017-10396 · Game Music Emu +2 · Game-Music-Emu +2

Name of the Vulnerable Software and Affected Versions: game-music-emu versions prior to 0.6.1 Description: The issue allows remote attackers to write to arbitrary memory locations, potentially leading to exploitation. Recommendations: For versions prior to 0.6.1, update to version 0.6.1 or later ...

PT-2016-7536 · Mozilla +4 · Nss +4

Name of the Vulnerable Software and Affected Versions: NSS versions 3.21.x Description: A flaw was found in the Diffie Hellman Client key exchange handling, making it vulnerable to a small subgroup confinement attack. This allows an attacker to recover private keys by confining the client DH key ...

PT-2017-7646 · Pcs +2 · Pcsd +2

Name of the Vulnerable Software and Affected Versions: pcsd in pcs versions prior to 0.9.157 Description: The issue is related to a session fixation problem. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploite...

PT-2016-6606 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.7.13 and earlier Description: The issue allows remote administrators to affect availability via vectors related to Server: Performance Schema. It is an easily exploitable vulnerability that can be compromised by a high...

PT-2016-6598 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.7.14 and earlier Description: The issue affects the confidentiality, integrity, and availability of the system. It can be exploited by a high-privileged attacker with network access via multiple protocols to compromise...

WordPress plugin "Markdown on Save Improved" vulnerable to cross-site scripting

Overview The WordPress plugin "Markdown on Save Improved" contains a stored cross-site scripting CWE-79 vulnerability. Kenta Yamamoto of Cryptography Laboratory,Department of Information and Communication Engineering, Graduate School of Tokyo Denki University reported this vulnerability to IPA...

PT-2015-2751

Name of the Vulnerable Software and Affected Versions libxml2 version 2.9.2 Description The issue is caused by improper handling of invalid input, allowing context-dependent attackers to cause a denial of service via crafted XML data. This can lead to an out-of-bounds read and a crash in libxml2...

PT-2016-3297 · Gnu +3 · Gnu Tar +3

Name of the Vulnerable Software and Affected Versions: GNU tar versions 1.14 through 1.29 Description: The issue is related to a directory traversal vulnerability in the safer name suffix function. This vulnerability might allow remote attackers to bypass an intended protection mechanism and writ...

WordPress Jetpack Plugin Security Patch

After a few critical bugs were recently discovered and patched in the core WordPress engine—a rarity with WordPress-related security issues—order has apparently been restored with the discovery of a critical vulnerability in a popular plugin. Insecure plugins have been at the heart of numerous...

PT-2015-1704 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.43 and earlier Oracle MySQL Server versions 5.6.24 and earlier Description: The issue is related to errors in the code of the Server : I S subcomponent of the MySQL database management system. It allows remote...

PT-2015-2789 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.43 and earlier Oracle MySQL Server versions 5.6.24 and earlier Description: The issue is related to errors in the code of the MySQL database management system. It may allow a remote attacker to disrupt the...

PT-2015-6384 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.0.5 Description: The issue allows remote attackers to cause a denial of service, resulting in a system crash due to a divide-by-zero error, via a crafted packet. This is caused by a problem in the oz usb handle...

Lhaplus vulnerable to remote code execution

Overview Lhaplus is a file compression/decompression software. Lhaplus contains a remote code execution vulnerability. Masato Kinugawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Decompressing a speciall...

The Validator in TERASOLUNA Server Framework for Java(WEB) vulnerable to input validation bypass

Overview The TERASOLUNA Server Framework for JavaWEB provided by NTT Data Corporation is a software framework for creating web applications. The TERASOLUNA Server Framework for JavaWEB is vulnerable to an issue contained in the Apache Struts 1 Validator, since it uses Apache Struts 1.2.9. The...

Photo Gallery 1.2.5 Shell Upload

Exploit Title: Photo Gallery 1.2.5 Unrestricted File Upload Date: 11-11-2014 Software Link: https://wordpress.org/plugins/photo-gallery/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ CVE: CVE-2014-9312 Category: webapps 1. Description...

PT-2014-4737 · Mysql Server +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions prior to 5.5.37 Description: The issue affects the availability of the system, allowing remote authenticated users to cause an impact via vectors related to ENARC. Recommendations: For versions prior to 5.5.37, update to...

PT-2013-1034 · Oracle +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.1.71 and earlier Oracle MySQL versions 5.5.33 and earlier Oracle MySQL versions 5.6.13 and earlier Description: The issue allows remote authenticated users to affect availability via unknown vectors related to Locking ...

PT-2013-1253 · Gentoo Linux · Strongswan

Name of the Vulnerable Software and Affected Versions: strongswan versions prior to 5.1.0 Description: The issue affects the strongswan package in Gentoo Linux, potentially leading to breaches in confidentiality, integrity, and availability of protected information. Exploitation of the...

CentOS Update for java CESA-2013:0957 centos6

Check for the Version of java OpenVAS Vulnerability Test CentOS Update for java CESA-2013:0957 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...