Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable from the same local network segment OSI Layer 2 Vendor: Siemens Equipment: SCALANCE X switches, RUGGEDCOM Win, RFID 181-EIP, and SIMATIC RF182C Vulnerability: Heap-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a...

@ckeditor/ckeditor5-build-balloon (>=0.0.1, <=0.2.0), @ckeditor/ckeditor5-build-balloon-toolbar (>=0.0.1, <=0.1.0) +7 more potentially affected by CVE-2018-11093 via @ckeditor/ckeditor5-link (>=0.5.1, <=1.0.0-beta.4)

@ckeditor/ckeditor5-link NPM version =0.5.1, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.1, =1.0.0-rc.2, =0.3.0, =0.5.2 Source cves: CVE-2018-11093 Source advisory: OSV:GHSA-GVPX-9459-W3MJ...

Fedora 26 : ckeditor (2018-1361f39801)

4.9.2 https://ckeditor.com/cke4/release/CKEditor-4.9.2 Security Updates - Fixed XSS vulnerability in the Enhanced Image image2 plugin reported by Kyaw Min Thein. - Issue summary: It was possible to execute XSS inside CKEditor using the tag and specially crafted HTML. Please note that the default...

Instagram Feed <= 1.5.1 - Cross-Site Scripting (XSS)

The Smash Balloon Social Photo Feed WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Ubuntu: Security Advisory (USN-3047-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3047-2 qemu, qemu-kvm regression

USN-3047-1 fixed vulnerabilities in QEMU. The patch to fix CVE-2016-5403 caused a regression which resulted in save/restore failures when virtio memory balloon statistics are enabled. This update temporarily reverts the security fix for CVE-2016-5403 pending further investigation. We apologize fo...

June 14, 2016 — KB3163018 (OS Build 10586.420)

None None...

Balloon Popping For Toddler HD - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Balloon Popping For Toddler HD published at the 'play' market has multiple vulnerabilities...

Kids Balloon Pop Game Free - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kids Balloon Pop Game Free published at the 'play' market has multiple vulnerabilities...

Balloon POP Games for toddlers - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Balloon POP Games for toddlers published at the 'play' market has multiple vulnerabilities...

Incredible Balloon Pop - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Incredible Balloon Pop published at the 'play' market has multiple vulnerabilities...

Balloon Pop Christmas Fun - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Balloon Pop Christmas Fun published at the 'play' market has multiple vulnerabilities...

My baby Game (Balloon POP!) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My baby Game Balloon POP! published at the 'play' market has multiple vulnerabilities...

Pop Balloon Kids - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Pop Balloon Kids published at the 'play' market has multiple vulnerabilities...

Balloon Squash - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Balloon Squash published at the 'play' market has multiple vulnerabilities...

Balloon Paradise - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Balloon Paradise published at the 'play' market has multiple vulnerabilities...

Balloon Pop - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Balloon Pop published at the 'play' market has multiple vulnerabilities...

openSUSE Security Update : xen (openSUSE-2015-730)

Xen was updated to fix 6 security issues. These security issues were fixed : - CVE-2014-0222: Validate L2 table size to avoid integer overflows bsc877642. - CVE-2015-4037: Insecure temporary file use in /net/slirp.c bsc932267. - CVE-2015-7835: Uncontrolled creation of large page mappings by PV...

FreeBSD : xen-tools -- populate-on-demand balloon size inaccuracy can crash guests (c0e76d33-8821-11e5-ab94-002590263bf5)

The Xen Project reports : Guests configured with PoD might be unstable, especially under load. In an affected guest, an unprivileged guest user might be able to cause a guest crash, perhaps simply by applying load so as to cause heavy memory pressure within the guest. %NASLMINLEVEL 70300 C Tenabl...

Xen Denial of Service Vulnerability (CNVD-2015-07245)

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. A security vulnerability exists in the 'libxlbuildpost' function in the tools/libxl/libxldom.c file and in the 'libxlsetmemory target' functions, due to a security flaw in the...