7523 matches found
Aruba Networks ClearPass Policy Manager SQL Injection Vulnerability
Aruba Networks ClearPass Policy Manager is a BYOD network access control policy enforcement platform. An SQL injection vulnerability in Aruba Networks ClearPass Policy Manager allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicious actions in the...
GLSA-201707-01 : IcedTea: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201707-01 IcedTea: Multiple vulnerabilities Multiple vulnerabilities have been discovered in IcedTea. Please review the CVE identifiers referenced below for details. Note: If the web browser plug-in provided by the...
[BSA-116] Security Update for openvpn
Bernhard Schmidt uploaded new packages for openvpn which fixed the following security problems: CVE-2017-7479 It was discovered that openvpn did not properly handle the rollover of packet identifiers. This would allow an authenticated remote attacker to cause a denial-of-service via application...
Nextcloud: Android content provider exposes password-protected share password hashes
Summary Nextcloud Android client v1.4.3 has a globally available content provider which exposes the bcrypt password hashes for password protected shared files and folders. Description Android apps can use a content provider to handle storage and retrieval of data. Content providers that are...
SUSE-SU-2017:1664-1 Security update for wireshark
The network analysis tool wireshark was updated to version 2.0.13 to fix the following issues: CVE-2017-9352: Bazaar dissector infinite loop wnpa-sec-2017-22 bsc1042304 CVE-2017-9348: DOF dissector read overflow wnpa-sec-2017-23 bsc1042303 CVE-2017-9351: DHCP dissector read overflow...
WonderCMS Cross-Site Request Forgery Vulnerability
WonderCMS is a PHP-based content management system. A cross-site request forgery vulnerability exists in WonderCMS. A remote attacker can exploit this vulnerability to perform unauthorized operations with null values or malformed command identifiers...
Urban Terror: Multiple vulnerabilities
Background Urban Terror is a free multiplayer first person shooter developed by FrozenSand, that will run on any Quake III Arena compatible engine. Description Multiple vulnerabilities have been discovered in Urban Terror. Please review the CVE identifiers referenced below for details. Impact A...
GLSA-201706-20 : Chromium: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201706-20 Chromium: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...
GLSA-201706-17 : Kodi: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201706-17 Kodi: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Kodi. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially...
CVE-2017-3743
If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility ASU, UpdateXpress System Pack Installer UXSPI or Dynamic System Analysis DSA to a second machine, the other users may be able to see the user ID...
CVE-2015-1786
Cross-site request forgery CSRF vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers...
CVE-2015-1786
Cross-site request forgery CSRF vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers...
CVE-2015-1786
Cross-site request forgery CSRF vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers...
GLSA-201706-06 : ImageWorsener: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201706-06 ImageWorsener: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ImageWorsener. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...
Wireshark: Multiple vulnerabilities
Background Wireshark is a network protocol analyzer formerly known as ethereal. Description Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to process a specially crafted netwo...
ImageWorsener: Multiple vulnerabilities
Background ImageWorsener is a cross-platform command-line utility and library for image scaling and other image processing. Description Multiple vulnerabilities have been discovered in ImageWorsener. Please review the CVE identifiers referenced below for details. Impact A remote attacker could...
Adobe Flash Player: Multiple vulnerabilities
Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...
SUSE-SU-2017:1400-1 Security update for java-1_7_0-openjdk
This update for java-170-openjdk fixes the following issues: - Update to 2.6.10 - OpenJDK 7u141 bsc1034849 Security fixes - S8163520, CVE-2017-3509: Reuse cache entries - S8163528, CVE-2017-3511: Better library loading - S8165626, CVE-2017-3512: Improved window framing - S8167110, CVE-2017-3514:...
