Linux kernel content misreference vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A content misreference vulnerability exists in fs/crypto/ in Linux kernel versions prior to 4.10.7. A local attacker can exploit this vulnerability to cause a denial of servic...

DEBIAN-CVE-2016-10318

A missing authorization check in the fscryptprocesspolicy function in fs/crypto/policy.c in the ext4 and f2fs filesystem encryption support in the Linux kernel before 4.7.4 allows a user to assign an encryption policy to a directory owned by a different user, potentially creating a denial of...

Design/Logic Flaw

dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...

CVE-2017-6003

dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...

openSUSE Security Update : wget (openSUSE-2017-9)

This update for wget fixes the following issues : Security issues fixed : - CVE-2016-7098: Fixed a potential race condition by creating files with .tmp ext and making them accessible to the current user only. bsc995964 Non security issues fixed : - bsc1005091: Don't call xfree on string returned ...

UBUNTU-CVE-2016-9801

In BlueZ 5.42, a buffer overflow was observed in "setextctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dump file...

Internet Bug Bounty: Heap overflow due to integer overflow in pg_escape_string() function

The fix for this bug has been committed: https://bugs.php.net/bug.php?id=73399 Description: ------------ I have found some vulnerable code at pgescapestring function in module PostgreSQL. pgescapestring function creates a new zendstring object to store escaped string. The size of destination stri...

Command injection

git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone...

CVE-2015-8968

git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone...

The vulnerability of the Linux operating system, which allows a hacker to overwrite arbitrary files

The vulnerability of the EXT4IOCMOVEEXT ioctl implementation in the Linux file system is related to deficiencies in access control. Exploiting this vulnerability allows a local attacker to re-write arbitrary files using a specially created request that relies on insufficient access rights checkin...

Linux kernel denial of service vulnerability (CNVD-2016-09487)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the mbcache function during ext2 and ext4 filesystem realities in Linux kernel versions 4.5.7 and earlier, which stems from the program...

Updated wget packages fix security vulnerability

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource CVE-2016-4971. Fixed a potential race condition by creating files with .tmp ext and making them accessible to the current user only CVE-2016-7098...

CVE-2016-7414

The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressedfilesize field is large enough, which allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a crafted PHA...

CVE-2016-7130

CVE-2016-7130 affects PHP’s WDDX extension (ext/wddx/wddx.c) in PHP builds prior to 5.6.25 and 7.x prior to 7.0.10. The issue arises when deserializing WDDX XML containing a binary element with an invalid base64 value, allowing remote attackers to trigger a NULL pointer dereference and crash the ...

CVE-2016-7130

Removed by vendor...

PHP < 5.6.26 DoS Vulnerability - Linux

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

PHP < 5.6.7 DoS Vulnerability - Linux

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

CVE-2016-1238

1 cpan/Archive-Tar/bin/ptar, 2 cpan/Archive-Tar/bin/ptardiff, 3 cpan/Archive-Tar/bin/ptargrep, 4 cpan/CPAN/scripts/cpan, 5 cpan/Digest-SHA/shasum, 6 cpan/Encode/bin/enc2xs, 7 cpan/Encode/bin/encguess, 8 cpan/Encode/bin/piconv, 9 cpan/Encode/bin/ucmlint, 10 cpan/Encode/bin/unidump, 11...

PHP ext/session/session.c Denial of Service Vulnerability

PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. A denial of service vulnerability exists in PHP versions prior to 5.5.38, 5.6.x prior to 5.6.24, and 7.x prior to 7.0.9 in which the ext/session/session.c...

The vulnerability of the PHP interpreter, which allows a remote attacker to execute arbitrary code

The multiple vulnerabilities of the PHP interpreter are located in the ext/date/phpdate.c component. These vulnerabilities involve the use of memory after it has been freed. As a result of exploiting these vulnerabilities by a malicious actor operating remotely, arbitrary code can be executed usi...