flash-player to 11.2.202.238 (critical)

Adobe Flash Player was updated to 11.2.202.238 fixing various bugs and security issues...

CVE-2013-1789

splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to the 1 Splash::arbitraryTransformMask, 2 Splash::blitMask, and 3 Splash::scaleMaskYuXu functions...

hpijs, hplip, libsane security update

CentOS Errata and Security Advisory CESA-2013:0500 Updated hplip packages that fix several security issues, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common...

CVE-2013-0335

OpenStack Compute Nova Grizzly, Folsom 2012.2, and Essex 2012.1 allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port...

Brewthology 0.1 SQL Injection Vulnerability

Brewthology version 0.1 remote SQL injection exploit that dumps the user table and leverages beerxml.php Brewthology 0.1 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/brewthology/files/brewthology/v0.1%20public%20beta/ Demo:...

CVE-2013-0891

Integer overflow in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a blob...

389-ds-base security, bug fix, and enhancement update

1.2.11.15-11 - Resolves: Bug 896256 - updating package touches configuration files 1.2.11.15-10 - Resolves: Bug 889083 - For modifiersName/internalModifiersName feature, internalModifiersname is not working for DNA plugin 1.2.11.15-9 - Resolves: Bug 891930 - DNA plugin no longer reports additiona...

RHEL 6 : xinetd (RHSA-2013:0499)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2013:0499 advisory. The xinetd package provides a secure replacement for inetd, the Internet services daemon. xinetd provides access control for all services based on th...

RHEL 6 : evolution (RHSA-2013:0516)

Updated evolution packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RTTucson Quotations Database Script - Authentication Bypass

RTTucson Quotations Database Script Auth Bypass SQL Injection Vulnerability By cr4wl3r http://bastardlabs.info Script: http://www.rttucson.com/files.html Bugs found /quotations/admin/include/login.php --------------------------- 36 if $POST'submit' 37 38 $Username = $POST'Username'; 39 $Password ...

RHEL 6 : samba4 (RHSA-2013:0506)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0506 advisory. Samba is an open-source implementation of the Server Message Block SMB or Common Internet File System CIFS protocol, which allows PC-compatible...

RHEL 6 : openssh (RHSA-2013:0519)

Updated openssh packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

RHEL 6 : squid (RHSA-2013:0505)

Updated squid packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 6 : hplip (RHSA-2013:0500)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0500 advisory. The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printers...

RHEL 6 : pcsc-lite (RHSA-2013:0525)

Updated pcsc-lite packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Miscellaneous memory safety hazards (rv:19.0 / rv:17.0.3) — Mozilla

Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be...

CVE-2013-0292

The dbusgproxymanagerfilter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal...

flash-player to 11.2.202.262 (critical)

Adobe Flash Player was updated to 11.2.202.262 to fix various security issues and bugs...

flash-player to 11.2.202.262 (critical)

Adobe Flash Player was updated to 11.2.202.262 to fix various security issues and bugs...

libvirt to fix use-after-free in virNetMessageFree() (important)

libvirt was updated to fix some bugs and security issues: Security issues fixed: - Fix crash on error paths of message dispatching, CVE-2013-0170 bnc800976 - security: Fix libvirtd crash possibility CVE-2012-4423 bnc780432 Also bugs were fixed: - qemu: Fix probing for guest capabilities bnc772586...