2231 matches found
Ubuntu: Security Advisory (USN-2879-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UBUNTU-CVE-2016-1614
The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a...
OpenSSH 'roaming_read' and 'roaming_write' function denial of service vulnerability
OpenSSH is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. The 'roamingread' and 'roamingwrite' functions in the roamingcommon.c file in OpenSSH's client, when, with specific proxy and forwarding options enabled, the Failure to properly...
CVE-2016-0943
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X mishandle the Global object, which allows attackers to bypass JavaScript API execution restrictions via...
Directory traversal
Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors...
CVE-2015-6427
CVE-2015-6427 describes a vulnerability in Cisco FireSIGHT Management Center where the HTTP attack detection of decrypted SSL traffic can be bypassed. The issue stems from improper handling of SSL-decrypted sessions, allowing an unauthenticated, remote attacker to bypass HTTP attack detection rul...
CVE-2015-6765
Use-after-free vulnerability in content/browser/appcache/appcacheupdatejob.cc in Google Chrome before 47.0.2526.73 allows remote attackers to execute arbitrary code or cause a denial of service by leveraging the mishandling of AppCache update jobs...
Heap overflow
The compileregex function in pcrecompile.c in PCRE before 8.38 and pcre2compile.c in PCRE2 before 10.2x mishandles the /?J:?|:?|?'R'\k'R'|?'R'H'Rk'Rf|s?'R'/ and /?J:?|:?|?'R'\z?|?'R'\k'R'|?'R'k'R'|?'R'H'Ak'Rf|s?'R'/ patterns, and related patterns with certain group references, which allows remote...
CVE-2015-8383
PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror...
PCRE 'pcre_exec' Function Denial of Service Vulnerability
PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A security vulnerability exists in the 'pcreexec' function in versions of PCRE prior to 8.38, which stems from the program's failure to...
KLA10703 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, bypass security restrictions or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper array elements...
Sql injection
SQL injection vulnerability in the wpuntrashpostcomments function in wp-includes/post.php in WordPress before 4.2.4 allows remote attackers to execute arbitrary SQL commands via a comment that is mishandled after retrieval from the trash...
CVE-2015-6756
Use-after-free vulnerability in the CPDFSDKPageView implementation in fpdfsdk/src/fsdkmgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by leveraging mishandling of...
CVE-2015-6756
Use-after-free vulnerability in the CPDFSDKPageView implementation in fpdfsdk/src/fsdkmgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by leveraging mishandling of...
Apple iOS cookie mishandling vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that allows a remote attacker to set a special cookie for the target device on the target website...
CVE-2015-5907
WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishandling of the resource cache of an SSL web site with an invalid X.509 certificate...
CVE-2015-5157
arch/x86/entry/entry64.S in the Linux kernel before 4.1.6 on the x8664 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI...
CVE-2015-5746
AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling...
