Thru Managed File Transfer Portal version 9.0.2 suffers from a remote SQL injection vulnerability.
e5c2bd00a93ce0b886ab5d27c5ecc5d879763a1889a4729da8faf34af093fd77Red Hat Security Advisory 2016-0277-01 - The rhev-hypervisor package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent. Note: Red Hat Enterprise Virtualization Hypervisor is only available for the Intel 64 and AMD64 architectures with virtualization extensions. A stack-based buffer overflow was found in the way the libresolv library performed dual A/AAAA DNS queries. A remote attacker could create a specially crafted DNS response which could cause libresolv to crash or, potentially, execute code with the permissions of the user running the library. Note: this issue is only exposed when libresolv is called from the nss_dns NSS service module.
16f8193295d41539b260186af779c496a1c336c7b0b9f4d88547042401772ac9Thru Managed File Transfer Portal version 9.0.2 suffers from a cross site scripting vulnerability.
e0c6c0e9ba1dfbb79a77ae2d57381ec098b0846532313373f1f0ef0c0886b5c6Debian Linux Security Advisory 3484-1 - Stepan Golosunov discovered that xdelta3, a diff utility which works with binary files, is affected by a buffer overflow vulnerability within the main_get_appheader function, which may lead to the execution of arbitrary code.
092897d5c817b1aa740e90a25d1710b333227949f37d0ba18586704e0de5f3adDebian Linux Security Advisory 3483-1 - Gustavo Grieco discovered an out-of-bounds write vulnerability in cpio, a tool for creating and extracting cpio archive files, leading to a denial of service (application crash).
982b4436bbc04685bb4ec3b4e6989b7d0ec39eca9cd6ba847333f9b2f46a73eaHP Security Bulletin HPSBGN03547 1 - A security vulnerability in glibc has been addressed with HPE Helion Eucalyptus Node Controller and other Helion Eucalyptus components. The vulnerability could be exploited remotely resulting in arbitrary execution of code. Revision 1 of this advisory.
80d01bb5a617b997b4377008c9a6dff9fe6fc1ba42119b92775c9ae396faf290Cisco Security Advisory - On February 16, 2016, a critical vulnerability in the GNU C library (glibc) was publicly disclosed. Multiple Cisco products incorporate a version of glibc that may be affected by the vulnerability. The vulnerability could allow an unauthenticated, remote attacker to trigger a buffer overflow condition that may result in a denial of service (DoS) condition or allow the attacker to execute arbitrary code on the affected device. This advisory will be updated as additional information becomes available. Cisco will release software updates that address this vulnerability. Workarounds that address this vulnerability are not available.
98e2a5fc5faefe2e196768071ca6d1e6982069fafb3fadd6e13fa4b71943e658Adobe's site suffered from cross site scripting and open redirection vulnerabilities.
f5e6b281ee7df6b9e8b755704b62cc50c79f664c2bb26f4faaad2d42d9b3ce50Chamilo LMS suffers from a persistent cross site scripting vulnerability.
bc13f65de0792bdc1e2bb9fd29ab0d6fdffa9843148374f7b6d135c76354780cChamilo LMS suffers from an insecure direct object reference vulnerability.
45ca288b13f7415dfb28d2c6c6aa16e6f8a5baf6d21c4e8d7a1a099587d9f341Investors Application suffered from a client-side script insertion vulnerability.
31b0a0b759a2c2c22be39be00d0d6a5f2c966fb77f6eb6b664a25e861da3f5e3Prezi suffered from cross site scripting and open redirection vulnerabilities.
a9272aa1383aa28eef7ba0439aca2188d07e11e69f869dfc892626f1450eac10iFixIt suffered from a persistent cross site scripting vulnerability.
61832184f77e03ab41094e0f543daad18e092a25bb0e0f4885e0fa9dbb5d593aiFixIt suffered from a persistent cross site scripting vulnerability.
298e8300b75f167cea651ce178b15c762d1853e337ce965c048f7d2cfd7f991bSTIMS Cutter version 1.1.3.20 overflow proof of concept with SEH overwrite.
7630dfcf1c23685d5ff746caef2a3193e9af63121e6307de11d7b6a33841ebc0
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed