mysql: unspecified vulnerability related to Error Handling DoS (CPU Jan 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error Handling...

WordPress VideoWhisper Live Streaming Integration Plugin <= 4.29.4 - Multiple Vulnerabilities

The error-handling feature in ls/rtmp.inc.php, videowhisperstreaming.php or bp.php allows the attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. Solution Update the plugin...

MariaDB 5.5.0 < 5.5.35 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.35. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.35 advisory. - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and...

Apple Safari Parent.Close User After Free - Ver2 (CVE-2010-1939)

A use-after-free vulnerability has been reported in Apple Safari. The vulnerability is due to an error in Apple Safari while handling the termination and subsequent referencing between child and parent windows. A remote attacker could trigger this vulnerability by enticing a vulnerable target to...

Out-of-memory condition yielding memory corruption during IRQ setup

ISSUE DESCRIPTION When setting up the IRQ for a passed through physical device, a flaw in the error handling could result in a memory allocation being used after it is freed, and then freed a second time. This would typically result in memory corruption. IMPACT Malicious guest administrators can...

Design/Logic Flaw

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error Handling...

CVE-2013-5908

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error Handling...

CVE-2013-5908

Disclaimer: This data contains information about vulnerable...

MySQL 5.6.x < 5.6.15 Multiple Vulnerabilities

The version of MySQL installed on the remote host is 5.6.x older than 5.6.15. As such, it is reportedly affected by vulnerabilities in the following components : - Error Handling - GIS - InnoDB - Privileges - Optimizer - Replication C Tenable Network Security, Inc. include"compat.inc"; if...

MySQL 5.5.x < 5.5.35 Multiple Vulnerabilities

The version of MySQL installed on the remote host is version 5.5.x prior to 5.5.35. It is, therefore, potentially affected by vulnerabilities in the following components : - Error Handling - InnoDB - Privileges - Optimizer - Replication C Tenable Network Security, Inc. include"compat.inc"; if...

PT-2014-1202 · Oracle +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.1.72 and earlier MySQL Server versions 5.5.34 and earlier MySQL Server versions 5.6.14 and earlier Description: The issue is related to an unspecified vulnerability in the Error Handling component of the MySQL Server,...

MySQL 5.1.x < 5.1.73 Multiple Vulnerabilities

The version of MySQL installed on the remote host is 5.1.x prior to 5.1.73. It is, therefore, reportedly affected by vulnerabilities in the following components : - Error Handling - InnoDB - Optimizer - Privileges C Tenable Network Security, Inc. include"compat.inc"; if description scriptid71972;...

Apple Safari parent.close Code Execution - Ver2 (CVE-2010-1939)

Safari is a web browsing application developed by Apple. A remote code execution vulnerability has been discovered in Apple Safari. The vulnerability is due to an error in Apple Safari while handling the termination and subsequent referencing between child and parent windows. To trigger this issu...

UBUNTU-CVE-2013-6431

The fib6add function in net/ipv6/ip6fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service NULL pointer dereference and system crash by leveraging the CAPNETADMIN capability for an IPv6 SIOCADDRT ioctl call...

Code injection

Cisco Adaptive Security Appliance ASA Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service device reload via a malformed response, aka Bug ID CSCuj28861...

Mozilla Thunderbird < 24.1.1 NSS and NSPR Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 24.1.1 and is, therefore, potentially affected the following vulnerabilities: - An error exists related to handling input greater than half the maximum size of the 'PRUint32' value. CVE-2013-1741 - An error exists in the 'NullCipher' function i...

CVE-2013-5992

Cross-site scripting XSS vulnerability in the displaySystemError function in html/handleerror.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to inject arbitrary web script or HTML by leveraging incorrect handling of error-message output...

Design/Logic Flaw

The displaySystemError function in html/handleerror.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to obtain sensitive information by leveraging incorrect handling of error-log output...

CVE-2013-5991

The CVE-2013-5991 vulnerability affects EC-CUBE: the displaySystemError function in html/handle_error.php on LOCKON EC-CUBE versions 2.11.0–2.11.5 can disclose sensitive information due to incorrect handling of error-log output. Affected product is EC-CUBE (LOCKON), with the issue arising in erro...

CVE-2013-5992

EC-CUBE 2.11.0–2.11.5 is vulnerable to a Cross-Site Scripting (XSS) flaw in the displaySystemError function that mishandles error-message output. The root cause is improper escaping/output handling of error messages in html/handle_error.php, allowing remote attackers to inject arbitrary script/HT...