[SECURITY] [DLA 401-1] imlib2 security update

Package : imlib2 Version : 1.4.2-8+deb6u1 CVE ID : CVE-2014-9762 CVE-2014-9763 CVE-2014-9764 CVE-2014-9762 GIF loader: Fix segv on images without colormap CVE-2014-9763 Prevent division-by-zero crashes CVE-2014-9764 Fix segfault when opening input/queue/id:000007,src:000000,op:flip1,pos:51 with f...

DLA-401-1 imlib2 - security update

Bulletin has no description...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Enterprise Manager Base Platform Loader Service Component

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified security vulnerability in the Enterprise Manager Base Platform Loader Service component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the vulnerability to...

optek.net XSS vulnerability

Vulnerable URL: http://www.optek.net/Flash/FlashHTML/3Dloader.php?moviename=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

CVE-2016-0442

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Loader Service...

CVE-2016-0442

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Loader Service...

Code injection

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Loader Service...

CVE-2016-0442

CVE-2016-0442 affects Oracle Enterprise Manager Grid Control’s Enterprise Manager Base Platform Loader Service in 12.1.0.4 and 12.1.0.5. The vulnerability enables remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors related to the Loader Service. P...

Oracle Enterprise Manager Cloud Control Multiple Vulnerabilities (January 2016 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple unspecified vulnerabilities in the following subcomponents of the Enterprise Manager Base Platform component : - Agent Next Gen - Discovery Framework - Loader Service - UI Framework Note th...

The vulnerability of the Mac OS X operating system, which allows a hacker to increase their privileges

The vulnerability of the kernel loader in the EFI component of the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created path name...

IBM WebSphere Process Server and Business Process Manager Advanced Incorrect SSL/TLS Handling Vulnerability

IBM WebSphere Process Server and Business Process Manager BPM Advanced are both products of IBM Corporation, U.S.A. IBM WebSphere Process Server is a set of business process automation engines; BPM is a comprehensive business process management platform. BPM Advanced is an advanced version. A...

Design/Logic Flaw

Remote Artifact Loader RAL in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.2 does not properly use SSL for its HTTPS connection, which allows remote authenticate...

CVE-2015-7441

Remote Artifact Loader RAL in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.2 does not properly use SSL for its HTTPS connection, which allows remote authenticate...

CVE-2015-7441

IBM’s advisory (Security Bulletin and accompanying IBM pages) confirms CVE-2015-7441 affects WebSphere Process Server and BPM Advanced via the Remote Artifact Loader (RAL), where HTTPS/SSL is not honored per server configuration, allowing remote authenticated users to obtain sensitive information...

The vulnerability of the Red Hat Enterprise Linux operating system allows a hacker to bypass security restrictions and execute arbitrary code.

The vulnerability of the grub2 loader in the Red Hat Enterprise Linux operating system is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary code using a specially created multiboot or...

Apple OS X kernel loader path validation vulnerability

Apple OS X is an operating system developed by Apple Inc. A security vulnerability in Apple OS X's handling of kernel loader path checksums allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

CVE-2015-7063

The kernel loader in EFI in Apple OS X before 10.11.2 allows local users to gain privileges via a crafted pathname...

CVE-2015-7063

The CVE-2015-7063 issue affects Apple macOS (OS X) EFI kernel loader prior to macOS 10.11.2. A local attacker can gain privileges through a crafted pathname, as described in the vulnerability summary. The impact is local privilege escalation, with the vulnerability rooted in EFI kernel-loader pat...

CVE-2015-7063

The kernel loader in EFI in Apple OS X before 10.11.2 allows local users to gain privileges via a crafted pathname...

flash-plugin: multiple code execution issues fixed in APSB15-25

Buffer overflow in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a...