CVE-2015-2153: Improper Restriction of Operations within the Bounds of a Memory Buffer

The rpkirtrpduprint function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via a crafted header length in an RPKI-RTR Protocol Data Unit PDU...

clutter, cogl, gnome, mutter security update

CentOS Errata and Security Advisory CESA-2015:0535 Updated gnome-shell, mutter, clutter, and cogl packages that fix one security issue, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security...

PT-2015-5633

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.7.2 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read or write and crash, via a crafted header length in an RPKI-RTR Protocol Data Unit PDU. This is due t...

PT-2015-5634

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.7.2 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and crash. This can be achieved via a crafted length, offset, or base pointer checksum value in the...

UBUNTU-CVE-2015-2265

The removebadchars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the 1 model or 2 PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...

WebGate WinRDS WESPPlayback.WESPPlaybackCtrl.1 Control Stack Buffer Overflow Vulnerability

WebGate WinRDS is a set of high-definition IP camera and DVR storage management software from Webgate Korea. A stack buffer overflow vulnerability exists in the WESPPlayback.WESPPlaybackCtrl.1 control of WebGate WinRDS. A remote attacker can pass 'PrintSiteImage', 'PlaySiteAllChannel',...

CVE-2015-2094

Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the 1 PrintSiteImage, 2 PlaySiteAllChannel, 3 StopSiteAllChannel, or 4 SaveSiteImage function...

RedHat Update for GNOME Shell RHSA-2015:0535-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

gnome-shell: lockscreen bypass with printscreen key

It was found that the Gnome shell did not disable the Print Screen key when the screen was locked. This could allow an attacker with physical access to a system with a locked screen to crash the screen-locking application by creating a large amount of screenshots...

SS-2015-006: XSS In GridField print

More info at https://www.silverstripe.org/software/download/security-releases/ss-2015-006/...

Apple MAC OS X Yosemite PDF File Information Disclosure Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. A vulnerability exists in Apple MAC OS X Yosemite's handling of password-protected PDF files created by the Print dialog box, where the password is included in the print parameter file, which can be exploited by remote...

Oracle Secure Global Desktop Multiple Vulnerabilities (January 2015 CPU) (POODLE)

The remote host has a version of Oracle Secure Global Desktop that is version 4.63, 4.71, 5.0 or 5.1. It is, therefore, affected by multiple vulnerabilities in the following components : - Apache HTTP Server - Client - Gateway JARP module - Gateway Reverse Proxy - OpenSSL - Print Servlet only in...

Vulnerabilities in Samsung SyncThru Web Service

Hello 3APA3A! There are Information Leakage and Insufficient Authorization vulnerabilities in SyncThru Web Service. This is web application for Samsung printers, particularly I found it with Samsung ML-1865W and other printers. Earlier I informed Samsung about it. ------------------------- Affect...

Apple CUPS cupsdDoSelect Remote Code Execution attack - Ver2 (CVE-2009-3553)

A code execution vulnerability has been reported in Apple Cups. An attacker could exploit this vulnerability via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. Successful exploitation of this vulnerability could allow a...

DEBIAN-CVE-2014-7300

GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging...

UBUNTU-CVE-2014-7300

GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging...

CUPS Remote Command Execution via Shellshock

Binary data cupsbashrce.nbin...

Fedora 21 : phpMyAdmin-4.2.12-1.fc21 (2014-15588)

phpMyAdmin 4.2.12.0 2014-11-20 ================================ - Blank/white page when JavaScript disabled - Multi row actions cause full page reloads - ReferenceError: targeurl is not defined - Incorrect text/icon display in Tracking report - Recordset return from procedure display nothing - Ed...

CVE-2014-9140

Buffer overflow in the ppphdlc function in print-ppp.c in tcpdump 4.6.2 and earlier allows remote attackers to cause a denial of service crash cia a crafted PPP packet...

PT-2014-8845

Name of the Vulnerable Software and Affected Versions tcpdump versions 4.6.2 and earlier Description A buffer overflow issue exists in the ppp hdlc function, located in the print-ppp.c file, allowing remote attackers to cause a denial of service by crashing the system via a crafted PPP packet...