Vulnerabilities in Google Chrome browser and the V8 browser kernel, which allow attackers to exert other effects or cause service failures

The multiple vulnerabilities of Google Chrome and the browser kernel V8 are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...

CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

CVE-2016-1645

CVE-2016-1645 is an out-of-bounds write issue in the pdfium library derived from OpenJPEG’s opj_j2k_update_image_data, used by Google Chrome’s PDF rendering path. Multiple connected advisories confirm the vulnerability in Chrome before 49.0.2623.87 and link it to a vulnerability class described a...

Adobe AIR <= 20.0.0.260 Multiple Vulnerabilities (APSB16-08)

The version of Adobe AIR installed on the remote Windows host is prior or equal to version 20.0.0.260. It is, therefore, affected by multiple vulnerabilities : - Multiple integer overflow conditions exist that allow an attacker to execute arbitrary code. CVE-2016-0963, CVE-2016-0993, CVE-2016-101...

The vulnerability of the Oracle Sun Systems Product Suite software allows a perpetrator to compromise accessibility.

The vulnerability of the Oracle Sun Systems Product Suite is related to errors in the code. Exploiting this vulnerability can allow a malicious individual to compromise accessibility by manipulating DevFS-related operations...

The vulnerability of the Oracle Sun Systems Product Suite software allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Integrated Lights Out Manager ILOM component in the Oracle Sun Systems Product Suite is related to code errors. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, availability, and confidentiality of information...

Debian Security Advisory DSA 3510-1 (iceweasel - security update)

Multiple security issues have been found in Iceweasel, Debian OpenVAS Vulnerability Test $Id: deb3510.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3510-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbone Networks Gm...

DSA-3510-1 iceweasel - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3491-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-3510-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BSI-TR-03116-4: Errors

List errors from Policy for BSI-TR-03116-4 Test. This VT has been deprecated as is not needed anymore. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Fedora 22 : php-udan11-sql-parser-3.0.4-1.fc22 / phpMyAdmin-4.5.1-1.fc22 (2015-17908c56c1)

phpMyAdmin 4.5.1.0 2015-10-23 =============================== - Invalid argument supplied for foreach - arraykeyexists expects parameter 2 to be array - Notice Undefined index: dropdatabase - Server variable edition in ANSIQUOTES sqlmode: losing current value - Propose table structure broken -...

The vulnerability of the Windows operating system and the Internet Explorer browser allows attackers to increase their privileges.

The vulnerability of the Windows operating system and the Internet Explorer browser is related to errors in library loading. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

The vulnerability of the web server for visualizing BACnet/IP network controllers, SAUTER moduWeb Vision, allows a intruder to bypass the authentication process.

The vulnerability of the BACnet/IP network controller visualization web server from SAUTER moduWeb Vision is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures by utilizing knowledge of password hashes without knowi...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system is related to errors during the loading of a library. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a maintenance failure or a service interruption.

The vulnerability of the Cisco IOS operating system Industrial Ethernet 2000 is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure e.g., device reboot...

SUSE-SU-2016:0624-1 Security update for openssl

This update for openssl fixes various security issues and bugs: Security issues fixed: - CVE-2016-0800 aka the 'DROWN' attack bsc968046: OpenSSL was vulnerable to a cross-protocol attack that could lead to decryption of TLS sessions by using a server supporting SSLv2 and EXPORT cipher suites as a...