11762 matches found
Debian DLA-730-1 : firefox-esr security update
Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or bypass of the same-origin policy. A man-in-the-middle attack in the addon update mechanism ha...
[SECURITY] [DLA 730-1] firefox-esr security update
Package : firefox-esr Version : 45.5.1esr-1deb7u1 CVE ID : CVE-2016-5290 CVE-2016-5291 CVE-2016-5296 CVE-2016-5297 CVE-2016-9064 CVE-2016-9066 Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation erro...
MDM enrollment failing for iOS and Android devices, but MAM enrollment works fine
On iOS, the enrollment fails during the second profile installation - The error is "Profile installation failed: profile failed to install" On Android, you see "Access to your company network is not available" Enrolling directly against the Gateway MAM works fine. The server-side logs are showing...
Some Workspace Environment Management security settings are not getting applied
Some WEM-related security settings such as hiding the Run menu or blocking access to system drives are not being applied, and the Agent log throws errors such as these: Exception - VuemEnvironmentalSettingsController.ExecuteEntityPolicySettings : Attempted to perform an unauthorized operation...
CVE-2016-9067
Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox 50...
Debian DSA-3716-1 : firefox-esr - security update
Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or bypass of the same-origin policy. Also, a man-in-the-middle attack in the addon update...
CVE-2016-9067
Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox 50...
The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, allow a perpetrator to trigger service interruptions or execute arbitrary codes.
The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are due to an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allo...
DSA-3716-1 firefox-esr - security update
Bulletin has no description...
Security vulnerabilities fixed in Firefox 50 — Mozilla
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. When the Mozilla Updater is run, if the Updater's log file in the...
SUSE-SU-2016:2764-1 Security update for util-linux
This update for util-linux fixes a number of bugs and one minor security issue. The following minor vulnerability was fixed: - CVE-2016-5011: Infinite loop DoS in libblkid while parsing DOS partition bsc988361 The following bugs were fixed: - bsc987176: When mounting a subfolder of a CIFS share,...
firewalld security, bug fix, and enhancement update
0.4.3.2-8 - Exclude firewallctl RHBZ1374799 0.4.3.2-7 - Tolerate ipv6rpfilter fail RHBZ1285769 - Fix setrules to copy the rule before extracting the table RHBZ1373260 - Translation update RHBZ1273296 - Conflict with NetworkManager 1:1.4.0-3.el7 RHBZ1366288 0.4.3.2-6 - Do not use exit code 254 for...
MS16-141: Security Update for Adobe Flash Player (3202790)
The remote Windows host is missing KB3202790. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code by convincing a user to visit a website containing specially crafted Flash content...
Fedora 24 : curl (2016-e8e8cdb4ed)
fix cookie injection for other servers CVE-2016-8615 - compare user/passwd case-sensitively while reusing connections CVE-2016-8616 - base64: check for integer overflow on large input CVE-2016-8617 - fix double-free in krb5 code CVE-2016-8619 - fix double-free in curlmaprintf CVE-2016-8618 - fix...
Yelp: Nginx server version disclosure on engineeringblog
Hi Yelp Team, I have found a little information disclosure on your system with regards to the version of server you are using, due to not properly handling 404 errors , whe you go to the page that i not existing, the exact nginx version was disclosed. PoC URL: engineeringblog.yelp.com/test PoC...
SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2016:2697-1)
This update for bind fixes the following issues : - A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. CVE-2016-8864, bsc1007829. - Fix BIND to return a valid...
The vulnerability of the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s kernel is related to errors in the code. Exploiting this vulnerability can allow a local attacker to cause service failures file system access errors through a specially crafted application...
The vulnerability of the LibreOffice office software package, which allows a hacker to trigger a service failure
The vulnerability of the LibreOffice office software package is related to errors in the code. Exploiting this vulnerability can allow a malicious individual to cause a service failure by opening a specially crafted file...
Debian DLA-691-1 : libxml2 security update
CVE-2016-4658 Namespace nodes must be copied to avoid use-after-free errors. But they don't necessarily have a physical representation in a document, so simply disallow them in XPointer ranges. CVE-2016-5131 The old code would invoke the broken xmlXPtrRangeToFunction. range-to isn't really a...