🟠 High ⏱ 15–60 min Last verified: 17 April 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-2690 CVE-2011-2692 CVE-2011-2691 CVE-2011-3328 CVE-2011-3464 Upstream summary: Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when […]
🟠 High ⏱ 30–90 min Last verified: 17 April 2016 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2013-3035, IBM Support Bulletin CVE: CVE-2013-3035 NVD summary: The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:0706-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-2851 Upstream summary: Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1097-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1983 Upstream summary: Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via […]
🟡 Medium ⏱ 15–45 min Last verified: 13 April 2016 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2016-8977, IBM Support Bulletin CVE: CVE-2016-8977 NVD summary: IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further […]
🟡 Medium ⏱ 10–30 min Last verified: 13 April 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1568-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-0254 Upstream summary: Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted […]
🟠 High ⏱ 30–90 min Last verified: 12 April 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-0138, IBM PSIRT advisory page CVE: CVE-1999-0138 NVD summary: The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access. References: […]
🟡 Medium ⏱ 10–30 min Last verified: 12 April 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SA:2006:052 (see also SUSE bugzilla) Related CVEs: CVE-2006-4484 Upstream summary: Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an […]
🟢 Low ⏱ 10–30 min Last verified: 11 April 2016 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2011-3982, IBM Support Bulletin CVE: CVE-2011-3982 NVD summary: The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, which allows […]
🟠 High ⏱ 30–90 min Last verified: 11 April 2016 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2016-10086, IBM PSIRT advisory page CVE: CVE-2016-10086 NVD summary: RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or […]
