2869 matches found
DLA-1424-1 linux-latest-4.9 - security update
Bulletin has no description...
CVE-2016-6566
The valueAsString parameter inside the JSON payload contained by the ucLogintxtLoginIdClientStat POST parameter of the Sungard eTRAKiT3 software version 3.2.1.17 is not properly validated. An unauthenticated remote attacker may be able to modify the POST request and insert a SQL query which may...
SUSE-SU-2018:1951-1 Security update for libopenmpt
This update for libopenmpt to version 0.3.9 fixes the following issues: These security issues were fixed: - CVE-2018-11710: Prevent write near address 0 in out-of-memory situations when reading AMS files bsc1095644 - CVE-2018-10017: Preven out-of-bounds memory read with IT/ITP/MO3 files containin...
Boxoft WAV To WMA Converter 1.0 Buffer Overflow
Exploit Title: Boxoft wav-wma Converter - Local Buffer Overflow SEH Date: 2018-07-08 Software Link: http://www.boxoft.com/wav-to-wma/ Software Version:1.0 Exploit Author: Achilles Target: Windows 7 x64 CVE: Description: A malicious .wav file cause this vulnerability. Category: Local Exploit buffe...
NuCom NC-WR644GACV Unauthenticated Configuration File Download
Overview ======== Researchers of NVEL4 Cybersecurity company have discovered that it is possible to access to the config file bypassing admin authentication and authorization. The vulnerability has been reported to the vendor. The vendor has confirmed the vulnerability but not issued to security...
Security Bulletin: GPFS security vulnerabilities in IBM Storwize V7000 Unified (CVE-2016-2985 and CVE-2016-2984)
Summary A fix is available for IBM Storwize V7000 Unified, for GPFS security vulnerabilities Vulnerability Details IBM General Parallel File System GPFS is a high-performance clustered file system. It is used in IBM Storwize V7000 Unified. CVEID: CVE-2016-2985 DESCRIPTION: A security vulnerabilit...
Security Bulletin: Vulnerability in SnapDrive for Windows may Result in Disclosure of Sensitive Information （CVE-2015-8544）
Summary A vulnerability in SnapDrive for Windows which may result in disclosure of sensitive information has been addressed by IBM. Vulnerability Details CVEID: CVE-2015-8544 DESCRIPTION: SnapDrive for Windows could allow a remote attacker to obtain sensitive information, caused by the disclosure...
Security Bulletin: IBM Maximo Asset Management is vulnerable to HTTP response splitting attacks (CVE-2017-1291)
Summary IBM Maximo Asset Management is vulnerable to HTTP response splitting attacks. Vulnerability Details CVEID: CVE-2017-1291 DESCRIPTION: IBM Maximo Asset Management is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted UR...
Cisco Identity Services Engine DoS
According to its self-reported version, the Cisco Identity Services Engine Software is affected by a denial of service vulnerability. Please see the included Cisco BID and the Cisco Security Advisory for more information. TRUSTED...
SUSE-SU-2018:1661-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues: Update to version 20180425 bsc1091836 Fix provided for: - GLK B0 6-7a-1/01 0000001e-00000022 Pentium Silver N/J5xxx, Celeron N/J4xxx - Name microcodes which are not allowed to load late with a .early suffix...
CVE-2018-5099
A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially exploitable crash when these references are used. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, and Firefo...
SUSE-SU-2018:1638-1 Security update for mailman
This update for mailman to version 2.1.15 fixes the following issues: - CVE-2016-6893: Prevent cross-site request forgery CSRF vulnerability in the user options page that allowed remote attackers to hijack the authentication of arbitrary users for requests that modify an option bsc995352. - Vario...
CVE-2018-11178
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 36 of 46...
CVE-2018-11156
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 14 of 46...
CVE-2018-11155
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 13 of 46...
CVE-2018-11158
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 16 of 46...
CVE-2018-11160
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 18 of 46...
CVE-2018-11163
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 21 of 46...