Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by an Application Error vulnerability

Summary IBM Security Guardium Big Data Intelligence SonarG has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2017-1768 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG generates an error message that includes sensitive information about its environment,...

Security Bulletin: IBM Security Guardium is affected by Application Error vulnerability (CVE-2016-0242)

Summary IBM Security Guardium could disclose sensitive information about its environment, users, or associated data in the error message when an authenticated user produces errors. Vulnerability Details CVEID: CVE-2016-0242 DESCRIPTION: IBM Security Guardium could disclose sensitive information...

ZZIPlib Bus Error Vulnerability

ZZIPlib is a lightweight used to extract files from the ZIP file to read the C language package , but also can be used to compress multiple files into zip format . A bus error vulnerability exists in the zzipparserootdirectory function in zip.c in ZZIPlib 0.13.68. An attacker could cause a denial...

Memory misreference vulnerability in multiple Mozilla products (CNVD-2017-07057)

Mozilla Firefox, Firefox ESR and Thunderbird are all developed by the Mozilla Foundation.Firefox is an open source web browser, Firefox ESR is an extended support version of Firefox.Thunderbird is a standalone email client from the Mozilla Thunderbird is a separate email client from Mozilla...

CVE-2016-9888

An error within the "tardirectoryforfile" function gsf-infile-tar.c in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Wi-Fi driver for Qualcomm’s Android operating system is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to gain increased privileges through a specially created application...

The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of Firefox and Firefox ESR browsers is related to errors in the code when the Java plugin is enabled. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted Java applet...

The vulnerability of the Enterprise Manager Grid Control software system allows a perpetrator to compromise the confidentiality and integrity of information.

The vulnerability of the Enterprise Manager Base Platform component of the Enterprise Manager Grid Control system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality and integrity of information...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Android operating system’s mediaserver component is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Mozilla Firefox and Firefox ESR HTMLVideoElement Interface Memory Error Vulnerability

Mozilla Firefox is an open source web browser. A memory error vulnerability exists in the Mozilla Firefox HTMLVideoElement interface, which allows remote attackers to modify the JavaScript code of the media element URI form to crash the application or execute arbitrary code...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component within the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity, accessibility, and confidentiality o...

Adobe Flash Player and AIR Memory Error Referencing Code Execution Vulnerability (CNVD-2015-04517)

Adobe Flash Player is a player that parses SWF content. Adobe AIR is a technology developed for the integration of web and desktop applications, which allows you to control cloud-based programs on the web without having to go through a browser. Adobe Flash Player and AIR are implemented with a...

The vulnerability of the IBM Domino electronic document management system allows a perpetrator to execute arbitrary code or trigger a service failure.

The IBM Domino electronic document management system has a vulnerability related to memory errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure by using a specially crafted GIF image...

CVE-2014-6427

Off-by-one error in the isrtsprequestorreply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service application crash via a crafted packet that triggers parsing of a token...

Solaris 10 libnspr - LD_PRELOAD Arbitrary File Creation Local Root Exploit

No description provided by source. !/bin/sh $Id: raptorlibnspr2,v 1.4 2006/10/16 11:50:48 raptor Exp $ raptorlibnspr2 - Solaris 10 libnspr LDPRELOAD exploit Copyright c 2006 Marco Ivaldi [email protected] Local exploitation of a design error vulnerability in version 4.6.1 of NSPR, as include...

Solaris 10 (libnspr) - Arbitrary File Creation Local Root Exploit

No description provided by source. !/bin/sh $Id: raptorlibnspr,v 1.1 2006/10/13 19:12:12 raptor Exp $ raptorlibnspr - Solaris 10 libnspr oldschool local root Copyright c 2006 Marco Ivaldi [email protected] Local exploitation of a design error vulnerability in version 4.6.1 of NSPR, as includ...

acroread: multiple code execution flaws (APSB11-24)

Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error vulnerability."...

Adobe Flash Player Multiple Vulnerabilities September-2011 (Linux)

This host is installed with Adobe Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobeflashplayermultvulnlinsep11.nasl 7029 2017-08-31 11:51:40Z teissa $ Adobe Flash Player Multiple Vulnerabilities September-2011 Linux Authors: Madhuri D Copyright:...

Adobe Flash Player Multiple Vulnerabilities (Sep 2011) - Linux

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

flash-plugin: critical flaws fixed in APSB11-26

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via crafted streaming media, related to a "logic error vulnerability."...