openSUSE Security Update : perl-DBI (openSUSE-2020-2051)

This update for perl-DBI fixes the following issues : - DBD::File drivers could open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402 This update was imported from the SUSE:SLE-15:Update update...

Recommended update for mailman (moderate)

openSUSE Security Update: Recommended update for mailman Announcement ID: openSUSE-SU-2020:1707-1 Rating: moderate References: 1171363 1173369 Cross-References: CVE-2020-12108 CVE-2020-12137 CVE-2020-15011 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities is now...

Design/Logic Flaw

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. NOTE: this issue exists because of an incomplete fix for CVE-2014-10401...

unixODBC: Insecure buffer copy in SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c

An argument order confusion flaw was found in the SQLWriteFileDSN API of unixODBC. This could only be exploited via a malicious ODBC database connector package with the maximum impact being a denial of service...

CVE-2018-13699

The mintToken function of a smart contract implementation for DestiNeed DSN, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13699

The CVE-2018-13699 entry concerns a vulnerability in the mintToken function of a DestiNeed (DSN) Ethereum token smart contract. The issue is described as an integer overflow that enables the contract owner to set the balance of an arbitrary user to any value. Several connected records (NVD entry,...

Integer overflow

The sell function of a smart contract implementation for DestiNeed DSN, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13230

The sell function of a smart contract implementation for DestiNeed DSN, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13230

CVE-2018-13230 applies to the Ethereum-based DestiNeed (DSN) token. The sell function in DSN’s smart contract has an integer overflow where amount * sellPrice can under some conditions evaluate to zero, leading to a seller’s assets being reduced. This issue is documented across multiple sources (...

unixODBC Denial of Service Vulnerability

unixODBC is an open source ODBC subsystem and an ODBC SDK for Linux, Mac OSX and UNIX . A denial of service vulnerability exists in unixODBC 2.3.5. The vulnerability arises because the SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC has out-of-order strncpy parameters. An...

openSUSE Security Update : roundcubemail (openSUSE-2016-996)

This update for roundcubemail fixes the following vulnerabilities : - CVE-2015-8864: XSS issue in SVG images handling boo976988 - CVE-2015-2181: issue in DBMail driver of password plugin Roundcubemail was also updated to 1.0.9, fixing the following bugs : - Fix a regression where some contact dat...

Fedora 22 : roundcubemail-1.1.5-1.fc22 (2016-a9c8f9dcff)

Release 1.1.5 Plugin API: Added html2text hook Plugin API: Added addressbookexport hook Fix missing emoticons on html-to-text conversion Fix random 'access to this resource is secured against CSRF' message at logout 4956 Fix missing language name in 'Add to Dictionary' request in HTML mode 4951...

openSUSE Security Update : exim (openSUSE-SU-2014:0983-1)

"Changes in exim : - Silence static checkers; beo1506. - update to 4.83 This release of Exim includes one incompatible fix : + the behavior of expansion of arguments to math comparison functions , was unexpected, expanding the values twice; CVE-2014-2972; bnc888520 This release contains the...

Microsoft IIS MDAC msadcs.dll RDS Arbitrary Remote Command Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

CVE-2011-0026

Integer signedness error in the SQLConnectW function in an ODBC API odbc32.dll in Microsoft Data Access Components MDAC 2.8 SP1 and SP2, and Windows Data Access Components WDAC 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name DSN and a crafted szDSN...

Integer overflow

Integer signedness error in the SQLConnectW function in an ODBC API odbc32.dll in Microsoft Data Access Components MDAC 2.8 SP1 and SP2, and Windows Data Access Components WDAC 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name DSN and a crafted szDSN...

CVE-2011-0026

Summary: CVE-2011-0026 is a buffer overflow resulting from an integer signedness error in SQLConnectW in odbc32.dll, affecting Microsoft Data Access Components (MDAC) 2.8 SP1/SP2 and Windows Data Access Components (WDAC) 6.0. An attacker can trigger remote code execution by supplying a long DSN s...

2011's First Patch Tuesday Fixes Three Windows Flaws

Microsoft released just two bulletins in this month’s edition of patch Tuesday. Both bulletins cover vulnerabilities in Windows, and Microsoft is recommending that users install the critical fix for the two vulnerabilities covered in MS11-02 immediately. In addition to the patches for three total...

CVE-2010-1947

Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter. NOTE: this may be related to CVE-2007-2069...

Directory traversal

Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...