libvirt security update

0.10.2-62.0.1.el69.1 - Replace docs/et.png in tarball with blank image 0.10.2-62.el69.1 - util: Implement virFileReadHeaderFD CVE-2017-5715 - util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD CVE-2017-5715 - util: introduce virHostCPUGetMicrocodeVersion CVE-2017-5715 - conf:...

CVE-2017-16584

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-17529

af/util/xp/utgofile.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

CVE-2017-17529

af/util/xp/utgofile.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

CVE-2017-17529

af/util/xp/utgofile.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

CVE-2017-17534

Technical details for CVE-2017-17534 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability databases.

Amazon Linux AMI : apr-util (ALAS-2017-929)

Apache Portable Runtime Utility APR-util fails to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial...

Medium: apr-util

Issue Overview: Apache Portable Runtime Utility APR-util fails to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, an...

MGASA-2017-0427 Updated apr-util packages fix security vulnerability

Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and...

Updated apr-util packages fix security vulnerability

Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and...

Fedora Update for apr-util FEDORA-2017-329e5fb4c9

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Libming Buffer Overflow Vulnerability

libming is a Flash SWF output library for PHP, Perl, Ruby, Python, C, C ++, Java, and more. A buffer overflow vulnerability exists in the printMP3Headers function in util/listmp3.c in libming 0.4.8 and earlier. An attacker can exploit this vulnerability via specially crafted files to cause a deni...

PT-2017-14627

Name of the Vulnerable Software and Affected Versions libming versions prior to 0.4.8 Description The issue is related to a global buffer overflow in the printMP3Headers function, located in util/listmp3.c. This may allow attackers to cause a denial of service via a crafted file. Recommendations...

PT-2017-14618

Name of the Vulnerable Software and Affected Versions libming versions prior to 0.4.8 Description The issue is related to a NULL pointer dereference in the outputSWF TEXT RECORD function, located in util/outputscript.c. This may allow attackers to cause a denial of service via a crafted swf file...

Cross site scripting

The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS...

CVE-2017-16880

The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS...

CVE-2017-16880

The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS...

CVE-2017-16880

The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS...

CVE-2017-16880

The CVE-2017-16880 entry concerns the filp whoops PHP library. Affected component: the dump() function in Util/TemplateHelper.php. Root cause: the function allows Cross-site Scripting (XSS) in versions before 2.1.13. The impact is XSS via output of unsanitized data; no explicit exploitation detai...

CVE-2017-16875

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow,...