319 matches found
UBUNTU-CVE-2016-9850
An issue was discovered in phpMyAdmin. Username matching for the allow/deny rules may result in wrong matches and detection of the username in the rule due to non-constant execution time. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 ar...
UBUNTU-CVE-2016-4412
An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the user's valid phpMyAdmin token. All 4.0.x versions prior to 4.0.10.16 are affected...
IBM Connections Information Disclosure Vulnerability (CNVD-2016-11535)
IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. An information...
PT-2017-7947 · Mysql Server +3 · Dbd::Mysql +3
Name of the Vulnerable Software and Affected Versions: DBD::mysql versions prior to 4.039 Description: The issue allows attackers to cause a denial of service, specifically an out-of-bounds read, when using server-side prepared statement support. This can be achieved through vectors involving an...
Network Scanner Buffer Overflow Vulnerability
MiTec Network Scanner is a multi-threaded port, IP, NetBIOS and SNMP scanner. A buffer overflow vulnerability exists in Network Scanner version 4.0.0, which can be exploited by an attacker to execute arbitrary code within the context of an application, which may also result in a denial of service...
Apache Cordova fails to restrict access permissions
Overview Apache Cordova contains a vulnerability where whitelist restrictions are not properly applied. Apache Cordova provided by the Apache Software Foundation is a framework for creating mobile applications for various platforms. iOS applications built using Apache Cordova contain a...
Silicon Graphics LibTiff tiff2bw Tool Denial of Service Vulnerability
Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the tifread.c file in the Silicon Graphics LibTiff 4.0.6 and earlier versions of the tiff2bw tool. An attacker can explo...
Squid Denial of Service Vulnerability (CNVD-2016-01443)
Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in the http.cc file in versions 4.x prior to Squid 4.0.7, which...
File Encryption Software "ED" where encrypted data may be easier to decipher when files of small size are encrypted
Overview File encyption software "ED" contains an issue when files of small size are encyrpted, they may become easier to decipher in comparison to when files of a larger size are encrypted. When encrypting small files that are smaller than the block size 128 bits, file encryption software "ED"...
GE Healthcare Centricity PACS Workstation Trust Management Vulnerability
GE Healthcare Centricity PACS Workstation is a General Electric GE image archiving and transfer system PACS workstation for the healthcare industry. A security vulnerability exists in GE Healthcare Centricity PACS Workstation versions 4.0 and 4.0.1, which originates from the use of 'CANal1' as a...
Cisco AnyConnect Secure Mobility Client Directory Traversal Vulnerability
The Cisco AnyConnect Secure Mobility Client is Cisco's next-generation VPN client. Cisco AnyConnect Secure Mobility Client 4.0 2049 has a directory traversal vulnerability in the implementation of the connection establishment process that could allow an unauthenticated, remote attacker to perform...
Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities exist in the samba4-4.0.0 package for the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities may lead to breaches of the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the Gentoo Linux operating system allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the kdelibs package up to version 4.0 in the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...
DEBIAN-CVE-2014-3560
NetBIOS name services daemon nmbd in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in stringwrappers.h...
DEBIAN-CVE-2013-4156
Apache OpenOffice.org OOo before 4.0 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted element in an OOXML document file...
DEBIAN-CVE-2012-4730
Request Tracker RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users with ModifySelf or AdminUser privileges to inject arbitrary email headers and conduct phishing attacks or obtain sensitive information via unknown vectors...
dhcp: NULL pointer dereference crash via crafted DHCPv6 packet
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field...
PT-2009-4123 · Nucleus · Nucleus Data Recovery Kernel Recovery For Novell
Name of the Vulnerable Software and Affected Versions: Nucleus Data Recovery Kernel Recovery for Novell version 4.03 Description: The issue is a stack-based buffer overflow that allows user-assisted attackers to execute arbitrary code. This is achieved by using a crafted .NKNT file...
