There was a bug in the mixing functions of Libgcrypt's random number generator: An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output. This bug exists since 1998 in all GnuPG and Libgcrypt versions₯ΐ = S2# vΒ |d;
2016-07-214bc70fc-5a2f-11e6-a1bc-589cfc0654e1"> Vulnerabilities in Curl curl 7.32.0 7.50.1«ΰ G E ]Ξ} ^E was introduced with Expat 2.1.0 when addressing CVE-2012-0876 (issue #496) CVE-2016-5300 -- Use more entropy for hash initialization than the original fix to CVE-2012-0876² C N«~» Aώ@ U£ Cf server memory, this crash is being treated as a security issuecvename>CVE-2016-2193
Malicious users were able to circumvent CSRF protection on any URL by sending specially crafted POST requests.
While the Jenkins update site data is digΛ " ` y passwords in debug log
Updated the win_useradd module return data to no longer include the password
of the newly created user. The password is now replaced with the string
XXX-REDACTED-XXX. Updated the Salt Cloud debug output to no longer display
win_passwΡ " ` 08-03-19
Summary: POST requests exposed via the IPython REST API are vulnerable to cross-site request έΰ " ` uld never close the connection and a processing thread would remain allocated to the connection.
Moderate: Security Manager bypass CVE-2014-7810
Malicious web applications could use expression language to bypass the protections of a Security Manageδ UO Mμy ` S of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.
[442710] High CVE-2014-7931: Memory corruption in V8. Credit to cloudfuzzer. [443115] High CVE-2014-792929666] High CVE-2014-7932: Use-after-fπΐ " ` e> CVE-2014-0549 CVE-2014-0550 CVE-2014-0551 CVE-2014-0552 CVE-2014-0553 CVE-2014-0554 CVE-2014-0555 https://www.mozilla.org/security/announce/2014/mfsa2014-44454ύ " ` 2013-12-18
JasPer fails to properly decode marker segments and other sections in malformed JPEG2000 files. Malformed inputs can cause heap buffer overflows which in turn may result in execution of ΰ " ` existing security manager. This may result in throwing a SecurityException".
By leveraging the vulnerability in the Java Management Extensions (JMX) MBean components, unprivileged Java code can access restricted classes. By using that vulnerability in conj D ^΅?+ ` BhCQ-0/discussion
A variety of programming languages suffer from a denial-of-service (DoS) condition against storage functions of key/value pairs in hash data structures, the condition can be leveraged by exploiting predictable collisions in the underlying hashing algori― O 9 S| ` M
Cr»ΐ " ` 011-2788
CVE-2011-2789 CVE-2011-2790 CVE-2011-2791 CVE-2011-2792 CVE-2011-2793 CVE-2011-2794 CVE-2011-2795 Multiple integer overflows in inter-color spaces conversion tools in libtiff 3Θ o Jκ¦ v@ +5-02
It contains the following fixes:
A buffer overflow was found in the "pnmtopng" conversion
program. By tricking an user (or automated system) to
process a specially crafted PNM image with pnmtopng, this
could be exploited to exeΐ
vη} Z123ffe8333">
A vulnerability was found in the fetchnews program (the NNTP client) that may under some circumst " `
2005-02-22 2005-03-08