5990 matches found
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal. Directory traversal vulnerability in the safernamesuffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related...
ALPINE-CVE-2016-6321
Directory traversal vulnerability in the safernamesuffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the filename parameter, aka POINTYFEATHER...
DEBIAN-CVE-2016-6321
Directory traversal vulnerability in the safernamesuffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the filename parameter, aka POINTYFEATHER...
openSUSE Security Update : libXrender (openSUSE-2016-1421)
This update of libXrender fixes the following issues : - insufficient validation of data from the X server could cause out of boundary memory writes boo1003002, CVE-2016-7949, CVE-2016-7950 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
Broadcom BCM43xx Wi-Fi - 'BroadPWN' Denial of Service
This Exploit allows arbitrary memory writes and reads. Running the specified payload within this package will write to the device's main CPU kernel, causing it to crash. More information about its origins here: http://boosterok.com/blog/broadpwn2/ Download:...
SUSE SLED12 / SLES12 Security Update : X Window System client libraries (SUSE-SU-2016:2828-1)
This update for the X Window System client libraries fixes a class of privilege escalation issues. A malicious X Server could send specially crafted data to X clients, which allowed for triggering crashes, or privilege escalation if this relationship was untrusted or crossed user or permission...
php,gd: Integer overflow error within _gdContributionsAlloc()
Integer overflow in the gdContributionsAlloc function in gdinterpolation.c in GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds memory write or memory consumption via unspecified vectors...
teeworlds -- Remote code execution
Teeworlds project reports: Attacker controlled memory-writes and possibly arbitrary code execution on the client, abusable by any server the client joins...
IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Local Privilege Escalation
!/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known functionality, and focusing on badly coded SUID binaries...
kernel: infiniband: Kernel crash by sending ABORT_TASK command
System using the infiniband support module ibsrpt were vulnerable to a denial of service by system crash by a local attacker who is able to abort writes to a device using this initiator...
kernel: infiniband: Kernel crash by sending ABORT_TASK command
System using the infiniband support module ibsrpt were vulnerable to a denial of service by system crash by a local attacker who is able to abort writes to a device using this initiator...
DirtyCow Linux privilege escalation vulnerability analysis CVE-2 0 1 6-5 1 9 5-the vulnerability warning-the black bar safety net
0x0 overview DirtyCow vulnerability is the recent burst of the Linux kernel local elevation of privilege vulnerability. The vulnerability is easy to trigger the use of simple and stable, the impact of multiple systems be considered a good vulnerability. But the vulnerability has existed for many...
Foxit Reader and PhantomPDF Denial of Service Vulnerability (CNVD-2016-10510)
Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. Based on the Windows platform on the Foxit Reader and PhantomPDF 8.1 before the version of the thumbnail shell extension plug-in FoxitThumbnailHndlrx86.dll has a security...
Debian DLA-664-1 : libxrender security update
Tobias Stoeckmann from the OpenBSD project has discovered a number of issues in the way various X client libraries handle the responses they receive from servers. Insufficient validation of data from the X server could cause out of boundary memory writes in the libXrender library potentially...
Debian DLA-660-1 : libxrandr security update
Insufficient validation of data from the X server in libxrandr before v1.5.0 can cause out of boundary memory writes and integer overflows. For Debian 7 'Wheezy', these problems have been fixed in version 2:1.3.2-2+deb7u2. We recommend that you upgrade your libxrandr packages. NOTE: Tenable Netwo...
DLA-664-1 libxrender - security update
Bulletin has no description...
[SECURITY] [DLA 660-1] libxrandr security update
Package : libxrandr Version : 2:1.3.2-2+deb7u2 CVE ID : CVE-2016-7947 CVE-2016-7948 Debian Bug : 840441 Insufficient validation of data from the X server in libxrandr before v1.5.0 can cause out of boundary memory writes and integer overflows. For Debian 7 "Wheezy", these problems have been fixed...
PT-2016-3276
Name of the Vulnerable Software and Affected Versions Apache Commons FileUpload versions prior to 1.3.3 Description The issue is related to the deserialization mechanism in the DiskFileItem class of the Apache Commons FileUpload library. It allows a remote attacker to execute arbitrary code or...
openSUSE Security Update : compat-openssl098 (openSUSE-2016-1189)
This update for compat-openssl098 fixes the following issues : OpenSSL Security Advisory 22 Sep 2016 bsc999665 Severity: High - OCSP Status Request extension unbounded memory growth CVE-2016-6304 bsc999666 Severity: Low - Pointer arithmetic undefined behaviour CVE-2016-2177 bsc982575 - Constant...