🟡 Medium ⏱ 10–30 min Last verified: 29 February 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-3635 Upstream summary: Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows […]
🟠 High ⏱ 30–90 min Last verified: 28 February 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-0040, IBM PSIRT advisory page CVE: CVE-1999-0040 NVD summary: Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table […]
🟠 High ⏱ 30–90 min Last verified: 28 February 2016 Affected versions: IBM AIX 7.1 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2015-5005, IBM Support Bulletin CVE: CVE-2015-5005 NVD summary: CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging […]
🟠 High ⏱ 30–90 min Last verified: 28 February 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2002-0678, IBM PSIRT advisory page CVE: CVE-2002-0678 NVD summary: CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by […]
🟡 Medium ⏱ 10–30 min Last verified: 27 February 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:0435-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7576 CVE-2015-7577 CVE-2015-7578 CVE-2015-7579 CVE-2015-7580 CVE-2015-7581 CVE-2016-0752 CVE-2016-0753 +3 more Upstream summary: The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller […]
🟡 Medium ⏱ 10–30 min Last verified: 25 February 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1095-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1987 Upstream summary: Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow […]
🟠 High ⏱ 30–90 min Last verified: 24 February 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2010-1039, IBM Support Bulletin CVE: CVE-2010-1039 NVD summary: Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 […]
🟠 High ⏱ 30–90 min Last verified: 23 February 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-0023, IBM PSIRT advisory page CVE: CVE-1999-0023 NVD summary: Local user gains root privileges via buffer overflow in rdist, via lookup() function. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom & Impact […]
🟠 High ⏱ 30–90 min Last verified: 23 February 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-0088, IBM Support Bulletin CVE: CVE-1999-0088 NVD summary: IRIX and AIX automountd services (autofsd) allow remote users to execute root commands. References: www-1.ibm.com/services/brs/brspwhub.nsf/advisori www-1.ibm.com/services/brs/brspwhub.nsf/advisori Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 22 February 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2820-1 Related CVEs: CVE-2015-0860 CVE-2015-0840 CVE-2014-3864 CVE-2014-3865 CVE-2014-0471 Upstream summary: Hanno Boeck discovered that the dpkg-deb tool incorrectly handled certain old style Debian binary packages. If a user or an […]
