Wolf CMS and Frog CMS Plugins - BD uploadr Arbitrary File Upload Vulnerability
Exploit for php platform in category web...
7.1AI Score
The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys,...
6.4AI Score
0.002EPSS
The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys,...
7AI Score
0.002EPSS
-0.3AI Score
0.943EPSS
-0.2AI Score
0.904EPSS
[CAL-2012-0026] Microsfot IE Same ID Property Remote Code Execution Vulnerability
[CAL-2012-0026] Microsfot IE Same ID Property Remote Code Execution Vulnerability CVE ID: CVE-2012-1875 http://technet.microsoft.com/en-us/security/bulletin/ms12-037 http://blog.vulnhunt.com/index.php/2012/06/13/cal-2012-0026-microsfot-ie-same-id-property-remote-code-execution-vulnerability/ 1...
-0.2AI Score
0.97EPSS
[SECURITY] Fedora 15 Update: bind-9.8.3-2.P1.fc15
BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS.....
1.4AI Score
0.943EPSS
[SECURITY] Fedora 16 Update: bind-9.8.3-2.P1.fc16
BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS.....
1.4AI Score
0.904EPSS
AI Score
0.97EPSS
[SECURITY] Fedora 17 Update: bind-9.9.1-2.P1.fc17
BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS.....
1.4AI Score
0.904EPSS
-0.2AI Score
CentOS 5 : bind97 (CESA-2012:0717)
Updated bind97 packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are...
0.3AI Score
0.904EPSS
RHEL 5 / 6 : bind (RHSA-2012:0716)
Updated bind packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are....
0.3AI Score
0.904EPSS
-0.2AI Score
0.904EPSS
9.7AI Score
0.904EPSS
CentOS 5 / 6 : bind (CESA-2012:0716)
Updated bind packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are....
0.2AI Score
0.904EPSS
-0.3AI Score
0.904EPSS
9.7AI Score
0.904EPSS
CentOS Errata and Security Advisory CESA-2012:0716 The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying...
9.2AI Score
0.904EPSS
CentOS Errata and Security Advisory CESA-2012:0717 The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying...
9.2AI Score
0.904EPSS
(RHSA-2012:0716) Important: bind security update
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A flaw...
0.7AI Score
0.904EPSS
(RHSA-2012:0717) Important: bind97 security update
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A flaw...
0.7AI Score
0.904EPSS
BIND: Multiple vulnerabilities
Background BIND is the Berkeley Internet Name Domain Server. Description Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Impact The vulnerabilities allow remote attackers to cause a Denial of Service (daemon crash) via a DNS...
9.2AI Score
0.943EPSS
ArtiPHP 5.5.0 Neo - index.php Multiple Cross-Site Scripting Vulnerabilities
ArtiPHP 5.5.0 Neo - index.php Multiple Cross-Site Scripting...
0.2AI Score
7.4AI Score
EPSS
0.1AI Score
Artiphp CMS v5.5.0 Multiple XSS POST Injection Vulnerabilities
Exploit for php platform in category web...
7.1AI Score
Artiphp CMS v5.5.0 Multiple XSS POST Injection Vulnerabilities
Title: Artiphp CMS v5.5.0 Multiple XSS POST Injection Vulnerabilities Advisory ID: ZSL-2012-5090 Type: Remote Impact: Cross-Site Scripting Risk: (3/5) Release Date: 16.05.2012 Summary Artiphp is a content management system (CMS) open and free to create and manage your website. Description...
6.3AI Score
7.4AI Score
EPSS
0.5AI Score
0.2AI Score
7.1AI Score
0.5AI Score
7.1AI Score
Vulnerabilities in Samsung TV (remote controller protocol)
Luigi Auriemma Application: Samsung devices with support for remote controllers http://www.samsung.com Versions: current Platforms: the vulnerable protocol is used on both TV and blue-ray devices so both of them should be vulnerable (my tests were...
-0.2AI Score
Samsun TV and BD-players security vulnerabilities
DoS, buffer overflow in Remote Controller...
3.6AI Score
7.4AI Score
EPSS
0.5AI Score
VMSA-2010-0009: ESXi utilities and ESX Service Console third party updates
The remote ESXi is missing one or more security related Updates from VMSA-2010-0009. Summary ESXi update for ntp and ESX Console OS (COS) updates for COS kernel, openssl, krb5, gcc, bind, gzip, sudo. Relevant releases VMware ESXi 4.0.0 without patch ESXi400-201005401-SG VMware ESX 4.0.0 without...
0.5AI Score
0.965EPSS
-0.4AI Score
0.104EPSS
-0.4AI Score
0.018EPSS
Data Breach at University of Tampa Posted Information of 30K Online
A breach at the University of Tampa may have exposed the sensitive information of thousands of students, faculty and staff members, including their names, identification numbers, social security numbers and birth dates, according to a press release posted to their the University’s Web site over...
0.3AI Score
Zinf Audio Player (m3u file) Buffer Overflow (SEH)
Exploit for windows platform in category local...
6.8AI Score
Oracle Linux 5.8 kernel security and bug update
kernel [2.6.18-308.el5] - [scsi] lpfc: Update lpfc version for 8.2.0.108.4p driver release (Rob Evers) [784073] - [scsi] lpfc: Fix FCP EQ memory check init w/single int vector (Rob Evers) [784073] [2.6.18-307.el5] - [s390] crypto: Reset sha2 index after processing partial block (David Howells)...
-0.2AI Score
0.011EPSS
Apple, Google and Others Agree to Provide Privacy Policy Option for Mobile Developers
This has turned out to be an interesting week for privacy. Just a few days after the White House laid out is privacy agenda, the California attorney general has announced an agreement with several major mobile platform providers, including Apple and Google, that will have the companies provide...
1AI Score
-0.1AI Score
Debian Security Advisory DSA 2379-1 (krb5)
The remote host is missing an update to krb5 announced via advisory DSA...
0.8AI Score
0.738EPSS
6.4AI Score
0.738EPSS
FreeBSD : chromium -- multiple vulnerabilities (fe1976c2-5317-11e1-9e99-00262d5ed8ee)
Google Chrome Releases reports : [73478] Low CVE-2011-3953: Avoid clipboard monitoring after paste event. Credit to Daniel Cheng of the Chromium development community. [92550] Low CVE-2011-3954: Crash with excessive database usage. Credit to Collin Payne. [93106] High CVE-2011-3955: Crash aborting....
0.5AI Score
0.055EPSS
Google Fixes 20 Flaws in Chrome, Adds Scanning of Downloaded Files
Google has released a major update for its Chrome browser, fixing 20 security vulnerabilities and including a new feature that scans downloaded executables and warns users if they’re potentially malicious. The new file-scanning feature is a major upgrade to the way that Chrome handles user...
-0.3AI Score
0.055EPSS