Dell EMC Isilon OneFS suffers from code execution, cross site request forgery, and cross site scripting vulnerabilities.
59ab98938a25d8249efefd24dd954dee7bc863a7a6ee5476a2d7d2db32b025baDebian Linux Security Advisory 4113-1 - Two vulnerabilities were discovered in the libraries of the Vorbis audio compression codec, which could result in denial of service or the execution of arbitrary code if a malformed media file is processed.
1cb1bd32d8833f948ddd33745aeaf3a7b19dd5e36fcc767ae724a53d6a15f13bRed Hat Security Advisory 2018-0319-01 - Red Hat JBoss Fuse, based on Apache ServiceMix, provides a small-footprint, flexible, open source enterprise service bus and integration platform. Red Hat JBoss A-MQ, based on Apache ActiveMQ, is a standards compliant messaging system that is tailored for use in mission critical applications. This patch is an update to Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. It includes bug fixes and enhancements, which are documented in the readme.txt file included with the patch files. Multiple security issues have been addressed.
e9ca392c86cd43b73ddc249d9d75bd30c2fe2225043a4b704dc7bf442df864f0Ubuntu Security Notice 3572-1 - It was discovered that FreeType incorrectly handled certain files. An attacker could possibly use this to cause a denial of service.
418a2c5d92f4ce5f77a1b28fc62133186353a80f29f0839ed7d7376998df802bDebian Linux Security Advisory 4112-1 - Multiple vulnerabilities have been discovered in the Xen hypervisor.
ceffec33bc6915916fcb2374144acb38464d1ab03665c4ca820441049ca5d45cNAT32 build 22284 suffers from code execution and cross site request forgery vulnerabilities.
d8265d767cc9b963f07372c12f459b0825a9f700142f218191ee36f7a87b1710TypeSetter CMS version 5.1 suffers from a cross site request forgery vulnerability.
9109814d944dd9f479f4fdf9836502981d58c127542b4be6466d544b591710fdUbuntu Security Notice 3571-1 - It was discovered that the Erlang FTP module incorrectly handled certain CRLF sequences. A remote attacker could possibly use this issue to inject arbitrary FTP commands. This issue only affected Ubuntu 14.04 LTS. It was discovered that Erlang incorrectly checked CBC padding bytes. A remote attacker could possibly use this issue to perform a padding oracle attack and decrypt traffic. This issue only affected Ubuntu 14.04 LTS. Various other issues were also addressed.
17cd261b5bd06018d5a33b401a3ff15f84875562d975783f5ffda1ae13006e8fNAT32 Build 22284 suffers from a remote command execution vulnerability.
5e9d5778308626f253822fbf37640788d7ed14246ade5b5d62dbca929e95d132WordPress UltimateMember plugin version 2.0 suffers from multiple cross site scripting vulnerabilities.
51b063f46cb392f0050c79dbcc3dc46dea8b04d63218d3f46f09f89eb09badd9Ubuntu Security Notice 3570-1 - Joonun Jang discovered that AdvanceCOMP incorrectly handled certain malformed zip files. If a user or automated system were tricked into processing a specially crafted zip file, a remote attacker could cause AdvanceCOMP to crash, resulting in a denial of service, or possibly execute arbitrary code.
75147135bd3cc9deb6c58eecd03231925bcdc9977f68a5abde5a1231ed8ad642userSpice version 4.3 suffers from a cross site scripting vulnerability.
26358ad2b70455571f4f1d06206ca406168e9e50282758eb56139257d27de760SOA School Management suffers from a remote SQL injection vulnerability.
b9dce9fe9ca5f5d0154ecb7e4e1127d25b4f49cea9fb65fd1cca8834283c2889Social Oauth Login PHP suffers from a remote SQL injection vulnerability that allows for authentication bypass.
182bdc6fc5d88b7e4fb011c6b87492522eeb273dd3dac14a11d2c39518c04792GNU binutils version 2.26.1 suffers from an integer overflow vulnerability.
26582d3081e2af8016824f9f2e3f5ad188288579040d53bd7ac1e29801a8b933
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed