Description of the security update for Project Server 2010: May 8, 2018

Description of the security update for Project Server 2010: May 8, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

CVE-2015-0234

Multiple temporary file creation vulnerabilities in pki-core 10.2.0...

Design/Logic Flaw

Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38...

MGASA-2017-0168 Updated libsndfile packages fix security vulnerabilities

A stack-based buffer overflow via a specially crafted FLAC file due to an error in the headerread function CVE-2017-7586. Several stack-based buffer overflows via a specially crafted FLAC file due to an error in the flacbuffercopy function CVE-2017-7585, CVE-2017-7741, CVE-2017-7742. Global buffe...

SUSE-SU-2017:1030-1 Security update for libsndfile

This update for libsndfile fixes the following issues: - CVE-2017-7585,CVE-2017-7741,CVE-2017-7742: Some stack-based buffer overflows via a specially crafted FLAC file were fixed error in the 'flacbuffercopy' function bsc1033054, bsc1033914, bsc1033915...

Gangstar City : Crime Miami - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Gangstar City : Crime Miami published at the 'play' market has multiple vulnerabilities...

ecoDMS Mobile - KeyStore usage, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application ecoDMS Mobile published at the 'play' market has multiple vulnerabilities...

DSL Flatrate - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application DSL Flatrate published at the 'play' market has multiple vulnerabilities...

Ubuntu 14.04 LTS : file vulnerabilities (USN-2494-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2494-1 advisory. Francisco Alonso discovered that file incorrectly handled certain ELF files. An attacker could use this issue to cause file to crash, resulting in a deni...

CVE-2013-4159

ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in 1 tcp/tcpconnect.c, 2 server/eventscript.c, 3 tools/ctdbdiagnostics, 4 config/gdbbacktrace, and 5 include/ctdbprivate.h...

Ubuntu 14.04 LTS : file vulnerabilities (USN-2278-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2278-1 advisory. Mike Frysinger discovered that the file awk script detector used multiple wildcard with unlimited repetitions. An attacker could use this issue to cause...

USN-2278-1 file vulnerabilities

Mike Frysinger discovered that the file awk script detector used multiple wildcard with unlimited repetitions. An attacker could use this issue to cause file to consume resources, resulting in a denial of service. CVE-2013-7345 Francisco Alonso discovered that file incorrectly handled certain CDF...

openSUSE Security Update : ctdb (openSUSE-SU-2014:0842-1)

ctdb was updated to version 2.3 to fix several temp file vulnerabilities CVE-2013-4159. Various other bugs were fixed by this upgrade, most notably bnc867815: Avoid lockwait congestion by using an overflow queue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

MGASA-2014-0058 Updated augeas package fixes security vulnerabilities

Multiple flaws were found in the way Augeas handled configuration files when updating them. An application using Augeas to update configuration files in a directory that is writable to by a different user for example, an application running as root that is updating files in a directory owned by a...

MGASA-2013-0301 Updated libraw packages fix security vulnerabilities

Updated libraw packages fix security vulnerabilities: It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, applications linked against LibRaw could be made to crash, resulting in a denial of servi...

CVE-2013-0338

libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service CPU and memory consumption via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity...

MS11-086: Description of the security update for Active Directory: November 8, 2011

None None...

[BSA-053] Security update for libreoffice

Rene Engelhard uploaded new packages for libreoffice which fixed the following security problems: CVE-2011-2713 Red Hat, Inc. security researcher Huzaifa Sidhpurwala reported multiple vulnerabilities in the binary Microsoft Word doc file format importer of OpenOffice.org, a full-featured office...

Pluck CMS 4.7 - Multiple Local File Inclusion / File Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/49525/info Pluck is prone to multiple file-include and a file-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerabilities using directory-traversal strings to view an...

Chyrp 2.x - '/includes/JavaScript.php?action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability. An attacker may leverage these issues to execute arbitrary...