CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports
CVE-2017-5421: Print preview spoofing
CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink
CVE-2017-5399: Memory safety bugs fixed in Firefox 52
CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and Firefox ESR 45.800
On a server redirect from HTTP to a FTP resource, wget would trust the
HTTP server and uses the name in the redirected URL as the destination
filename. Luke Farone reports: Double-clicking a file in the user's media library with a
specially-crafted path or filename allows for arbitrary code execution
with the permissions of the user running Pitiviurl>http://www.openwall.com/lists/oss-security/2015/12/23/8
A security-related issue has been reported in Go's math/big
package. The issue was introduced in Go 1.5. We recommend that all
users upgrade to Go 1.5.3, which fixes the issue. Go programs must
be recompiled with Go 1.5.3 in order to receive the fix. The Go t s q Ts J %q
Inadequate ACL checks in com_content provide potential read access
to data which should be access restricted99
wordpress -- 2 cross-site scripting vulnerabilities unzip 6.0_4Ubuntu Security Notice USN-2489-1 reports: Michal Zalewski discovered that unzip incorrectly handled certain malformed zip archives. If a user or automated system were tricked into processing a specially crafted zip archive, an attacker could possibly execute arbitrary code.
foreman-proxy 1.6.Foreman Security reports: The smart proxy when running in an SSL-secured mode permits incoming API calls to any endpoint without requiring, or performing any verification of an SSL client certificate. This pe K q K@f {}cIAdobe reports:
Versions of RT between 4.2.0 and 4.2.2 (inclusive) are vulnerable to a denial-of-service attack via the email gateway; any installation which accepts mail from ` qx^s520454O.KKMR 9،8eD)31 N)qʈԐ8eFD(310&4c,*#RcSc 1 C qg N@ZAd buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute arbitrary code via a crafted 3d model file that triggers a long error message, as demonstrated by a .ase filebid>55839
CVE-2012-4552 http://www.openwall.com/lists/oss-security/2012/10/29/8 2012-10-09 201 qY g G R9 J r_protected to the whitelist method attr_accessible which is not vulnerable to this276 2013-02-117fe5b84a-78eb-11e2-8441-00e0814cab4e"> jenkinsjenkins 2 q8 _@x0p> 1.501 However methods like IO#open did not check the filename passed to them, and just passed those strings to lower layer routines. This led to create unintentional files4522
http://www.ruby-lang.org/en/news/2012/10/12/poisoned-NUL-byte-vulnerability/ https://access.redhat.com/security/cve/CVE-2012-4522/ 2012-10-12 Mozilla browsers currently NUL terminate strings, however recent Chrome versions are known not to provide NUL terminated data.
CVE-2012-3422 CVE-2012-3423 http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-July/019580.ht I qx^UKK1S =FS śLL[;.Ey@@fO [8?S9} .Ml*w۳ @seWJ(6kґk B/2TO6~qw< ^{ՇX8j! g0ޏ04&hR@ z16sC1a-Ww 67a5oU 5 qҸzݘ%<G.qBsLg. 8τ6eO"w P袥UMAYPFҕ@Ky=Ϧd_p< q x