2934 matches found
Silicon Graphics LibTiff 'PixarLogDecode' Function Denial of Service Vulnerability
Silicon Graphics LibTiff is a library for reading and writing TIFF files. A security vulnerability in the 'PixarLogDecode' function in Silicon Graphics LibTiff's tifpixarlog.c file allows remote attackers to exploit the vulnerability to construct special TIFF images that can be tricked into being...
CVE-2016-3993
Off-by-one error in the imlibMergeUpdate function in lib/updates.c in imlib2 before 1.4.9 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted coordinates...
Oracle Linux 7 : kernel (ELSA-2016-1033)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1033 advisory. - lib keys: Fix ASN.1 indefinite length object parsing David Howells 1308814 1308815 CVE-2016-0758 Tenable has extracted the preceding description block directl...
Fedora 23 : dovecot-2.2.19-1.fc23 (2015-46afff8d90)
dovecot updated to 2.2.19 mdbox: Rebuilding could have caused message's reference count to overflow the 16bit number in some situations, causing problems when trying to expunge the duplicates. Various search fixes fts, solr, tika, lib-charset, indexer Various virtual plugin fixes Various fixes...
RHEL 7 : sos (RHSA-2016:0188)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2016:0188 advisory. The sos package contains a set of utilities that gather information from system hardware, logs, and configuration files. The information can then be...
sos security and bug fix update
3.2-35.0.1.3 - Recreated patch for orabug 18913115 - Make the selinux plugin fixfiles option useful John Haxby orabug 18913115 - Added removegpgstring.patch Bug 18313898 - Added sos-oracle-enterprise.patch - Added sos-oraclelinux-vendor-vendorurl.patch = 3.2-37 - sosreport prepare report in a...
CVE-2015-8630
The 1 kadm5createprincipal3 and 2 kadm5modifyprincipal functions in lib/kadm5/srv/svrprincipal.c in kadmind in MIT Kerberos 5 aka krb5 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash b...
CVE-2016-1938
The smpdiv function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services NSS before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the 1 mpdiv or 2...
XCart 5.2.6 - Code Execution
!/usr/local/bin/python Exploit for XCart 5.2.6 Code Execution vulnerability An admin account is required to use this exploit Curesec GmbH import sys import re import requests requires requests lib if lensys.argv != 4: exit"usage: python " + sys.argv0 + " http://example.com/xcart/ [email protected]...
kernel security, bug fix, and enhancement update
3.10.0-229.20.1.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-229.20.1 - Revert: crypto nx - Check for bogus firmware properties Phillip Lougher 1247127 1190103 - Revert: crypto nx - Moving NX-AES-CBC to be processed logic Phillip Lougher 1247127 1190103 - Revert: crypto nx - Moving...
Researchers to Develop Long-Lasting Solid-State Batteries
Whenever you go to Buy any Electronic Gadget — Phone, Tablet, Laptop, Watch — the most important specification isn’t its processor speed or its camera quality. It’s how long the device’s battery backup is. Imagine easy access to such batteries that provide more battery power after charging it onc...
Path traversal
Absolute path traversal vulnerability in lib/download.php in the IBS Mappro plugin before 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter...
CVE-2015-5472
CVE-2015-5472 affects the WordPress IBS Mappro plugin (prior to version 1.0). A flaw in lib/download.php allows an attacker to perform absolute path traversal by supplying a full pathname in the file parameter, enabling reading of arbitrary files on the server. The vulnerability is confirmed acro...
WukongCRM 0.5.1 /App/Lib/Action/WeixinAction.class.php XXE漏洞
No description provided by source...
Updated ruby-rack packages fix CVE-2015-3225
Updated ruby-rack packages fix security vulnerability: lib/rack/utils.rb in Rack before 1.5.4 allows remote attackers to cause a denial of service SystemStackError via a request with a large parameter depth CVE-2015-3225...
DEBIAN-CVE-2014-2570
Cross-site scripting XSS vulnerability in www/makesubset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...
CVE-2014-2570
Cross-site scripting XSS vulnerability in www/makesubset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...
CVE-2014-2570
Cross-site scripting XSS vulnerability in www/makesubset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in www/makesubset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...