4466 matches found
CVE-2016-1000007
Pagure 2.2.1 XSS in raw file endpoint...
CVE-2016-1000007
Pagure 2.2.1 XSS in raw file endpoint...
CVE-2016-1000007
The connected records confirm a concrete vulnerability: Pagure 2.2.1 contains a Cross-Site Scripting (XSS) flaw specifically in the raw file endpoint. The NVD entry CVE-2016-1000007 documents this XSS issue, and CNVD also references Pagure 2.2.1 XSS in the same context. Public references in these...
PT-2016-4492
Name of the Vulnerable Software and Affected Versions Pagure version 2.2.1 Description The issue concerns an XSS in the raw file endpoint. Recommendations For Pagure version 2.2.1, update to a newer version that contains a fix for this issue...
How to create a raw VDI on XenServer ?
Sometimes when performance is important over other functionalities like snapshot fast clone which are provided by the VHD layer, we need to create raw VDI...
Debian DSA-3652-1 : imagemagick - security update
This updates fixes many vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service or the execution of arbitrary code if malformed TIFF, WPG, RLE, RAW, PSD, Sun, PICT, VIFF, HDR, Meta, Quantum, PDB, DDS, DCM...
DSA-3652-1 imagemagick - security update
Bulletin has no description...
Debian Security Advisory DSA 3652-1 (imagemagick - security update)
This updates fixes many vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service or the execution of arbitrary code if malformed TIFF, WPG, RLE, RAW, PSD, Sun, PICT, VIFF, HDR, Meta, Quantum, PDB, DDS, DCM...
Fedora 23 : drupal7-views (2016-ed5f606dde)
Fixes Views - Less Critical - Access Bypass - SA-CONTRIB-2016-036 Changes since 7.x-3.13 : - Adding field handlers for statistics fields - \2200309 by helmo: Changed invalid placeholder from 'handler' to 'extender'. - \2708535 by stefan.r: Allow users to sort on a specific language, showing it...
Fedora 24 : drupal7-views (2016-fff25f75b4)
Fixes Views - Less Critical - Access Bypass - SA-CONTRIB-2016-036 Changes since 7.x-3.13 : - Adding field handlers for statistics fields - \2200309 by helmo: Changed invalid placeholder from 'handler' to 'extender'. - \2708535 by stefan.r: Allow users to sort on a specific language, showing it...
The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.
The vulnerability in the tvbrawtextadd function within the MEGACO dissector’s code, located in epan/dissectors/packet-megaco.c, allows malicious actors operating remotely to trigger a service failure hang by using an empty string...
The vulnerability of the Linux operating system, which allows a malicious individual to gain access to protected information
The function rawcmdcopyout in the file /drivers/block/floppy.c contains an error in the handling of permissions for accessing memory pointers during the execution of the system call FDRAWCMD. This allows a malicious individual to gain access to information stored in the dynamic memory of the...
The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure or increase their privileges.
The Linux operating system contains a vulnerability related to errors in processing system calls. Exploiting this vulnerability allows for performing service failures or increasing privileges when executing the system call FDRAWCMD ioctl...
PT-2016-7916
Name of the Vulnerable Software and Affected Versions ctdb affected versions not specified Description The issue is related to ctdb opening sockets with htonsIPPROTO RAW. There is no information provided about the estimated number of potentially affected devices worldwide or details about...
PT-2016-5963
Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service by changing FIFO registers and issuing a VGA command, which triggers an...
Adobe Flash - Overflow in Processing Raw 565 Textures
Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=792 There is an overflow in the processing of raw 565 textures in ATF processing. To reproduce the issue, load the attach file '70' using LoadImage.swf as follows:...
Adobe Flash - Overflow in Processing Raw 565 Textures
Adobe Flash - Overflow in Processing Raw 565 Textures Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=792 There is an overflow in the processing of raw 565 textures in ATF processing. To reproduce the issue, load the attach file '70' using LoadImage.swf as follows:...
Adobe Flash - Overflow in Processing Raw 565 Textures
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=792 There is an overflow in the processing of raw 565 textures in ATF processing. To reproduce the issue, load the attach file '70' using LoadImage.swf as follows: LoadImage.swf?img=70 Proof of Concept:...
CVE-2016-2140
The libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk...
DEBIAN-CVE-2016-2140
The libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk...