3198 matches found
Downloads Resources over HTTP
Overview Affected versions of openframe-ascii-image insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...
Downloads Resources over HTTP
Overview Affected versions of pk-app-wonderbox insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...
[SECURITY] Fedora 24 Update: calamares-2.4.4-5.fc24
Calamares is a distribution-independent installer framework, designed to in stall from a live CD/DVD/USB environment to a hard disk. It includes a graphical installation program based on Qt 5. This package includes the Calamares framework and the required configuration files to produce a working...
[SECURITY] Fedora 25 Update: calamares-2.4.4-5.fc25
Calamares is a distribution-independent installer framework, designed to in stall from a live CD/DVD/USB environment to a hard disk. It includes a graphical installation program based on Qt 5. This package includes the Calamares framework and the required configuration files to produce a working...
Updated tar packages fix security vulnerability
Harry Sintonen discovered that GNU tar does not properly handle member names containing '..', thus allowing an attacker to bypass the path names specified on the command line and replace files and directories in the target directory CVE-2016-6321...
MGASA-2016-0386 Updated tar packages fix security vulnerability
Harry Sintonen discovered that GNU tar does not properly handle member names containing '..', thus allowing an attacker to bypass the path names specified on the command line and replace files and directories in the target directory CVE-2016-6321...
Classic kernel vulnerabilities debugging notes-vulnerability warning-the black bar safety net
Foreword The kernel vulnerability for me has always been a bridge, remember two years ago, just contact binary vulnerability when, at the time today's protagonist has just appeared, when debugging this vulnerability when the whole heart is crashing, and recently I relive a bit of the vulnerabilit...
MS16-136: Description of the security update for SQL Server 2014 Service Pack 2 GDR: November 8, 2016
None None...
MS16-136: Description of the security update for SQL Server 2014 Service Pack 1 CU: November 8, 2016
MS16-136: Description of the security update for SQL Server 2014 Service Pack 1 CU: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create accounts, or ...
MS16-136: Description of the security update for SQL Server 2012 Service Pack 3 GDR: November 8, 2016
MS16-136: Description of the security update for SQL Server 2012 Service Pack 3 GDR: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create accounts, or...
CVE-2016-6794
When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement feature for...
AIX 5.3 TL 12 : nettcp (IV88957) (SLOTH) (deprecated)
https://vulners.com/cve/CVE-2015-7575 The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle...
X-Forwarded-For Header Insert
Use Case X-Forwarded-For header can be used to pass the Client IP information to the backend server. When HTTP request contains X-Forwarded-For header, the values will be replaced with single client IP address. If there is no X-Forwarded-For header, it will be added and assigned with the client I...
MS16-121: Description of the security update for Office Web Apps Server 2013: October 11, 2016
None None...
MS16-121: Description of the security update for Word 2013: October 11, 2016
MS16-121: Description of the security update for Word 2013: October 11, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
Linux kernel local elevation of privilege vulnerability (CNVD-2016-09532)
Linux kernel is an open source operating system. IPv6 netfilter in Linux kernel version 4.6.2 fails to validate specific offset fields, and a local ordinary user can replace the policy of the ip6tables module with IP6TSOSETREPLACE, and thus gain system root privileges...
CVE-2016-4526
ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory...
CVE-2016-4526
ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory...