[security bulletin] HPSBUX03001 SSRT101382 rev.1 - HP-UX Whitelisting (WLI), Local System Integrity Risk

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04227671 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04227671 Version: 1 HPSBUX03001...

CVE-2013-6219: Undefined Security Weakness

Unspecified vulnerability in HP HP-UX Whitelisting aka WLI before A.01.02.02 on HP-UX B.11.31 allows local users to bypass intended access restrictions via unknown vectors...

CVE-2014-1724

Use-after-free vulnerability in Freebsoft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service application hang or possibly have unspecified other impact via a text-to-speech request...

CVE-2014-1724

Use-after-free vulnerability in Freebsoft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service application hang or possibly have unspecified other impact via a text-to-speech request...

CVE-2014-1724

Use-after-free vulnerability in Freebsoft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service application hang or possibly have unspecified other impact via a text-to-speech request...

CVE-2014-1724

Summary: CVE-2014-1724 is a use-after-free in Free(b)soft Speech Dispatcher 0.7.1 used by Google Chrome

CVE-2014-1724

Use-after-free vulnerability in Freebsoft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service application hang or possibly have unspecified other impact via a text-to-speech request...

CVE-2014-1724: Undefined Security Weakness

Use-after-free vulnerability in Freebsoft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service application hang or possibly have unspecified other impact via a text-to-speech request...

The PCI DSS 3.0 SAQs are here!

The Payment Card Industry Security Standards Council PCI SSC released Data Security Standards DSS 3.0 in November 2013 and has just released the related Self-Assessment Questionnaires SAQ. There are two new SAQs, SAQ A-EP and SAQ B-IP...

CVE-2013-6200

CVE-2013-6200 concerns a local vulnerability in HP-UX’s m4(1) on HP-UX B.11.23 and B.11.31, allowing local users to obtain sensitive information or modify data via unspecified vectors. HP's security bulletin HPSBUX02963 (SSRT101297) and subsequent patches confirm affected versions and remediation...

B-net Software Content Management System shout.php name Parameter XSS - Ver2 (CVE-2006-0078)

A cross-site scripting vulnerability has been reported in Haddad Said B-net Software 1.0. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Yokogawa Multiple Products Vulnerabilities

OVERVIEW Yokogawa reports that several buffer overflow vulnerabilities affect several of its products. Juan Vazquez of Rapid7 Inc.,Rapid7 Inc., http://www.rapid7.com, web site last accessed May 13, 2014. and independent researcher Julian Vilas Diaz reported to CERT/CC that they identified several...

HP B-series SAN Network Advisor Installed (Windows)

Binary data hpb-seriessannetworkadvisorinstalled.nbin...

HP B-series SAN Network Advisor < 12.1.1 Remote Code Execution (Windows)

The version of HP B-series SAN Network Advisor on the remote Windows host is a version prior to 12.1.1. As such, it is affected by a remote code execution vulnerability. It should be noted that while the associated references report on a remote code execution vulnerability in EMC Connectrix Manag...

HP B-series SAN Network Advisor < 12.1.1 Remote Code Execution (Linux)

The version of HP B-series SAN Network Advisor on the remote Linux host is a version prior to 12.1.1. As such, it is affected by a remote code execution vulnerability. It should be noted that while the associated references report on a remote code execution vulnerability in EMC Connectrix Manager...

[security bulletin] HPSBHF02953 rev.1 - HP B-series SAN Network Advisor, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04045640 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04045640 Version: 1 HPSBHF02953 rev....

CVE-2013-6810

The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition CMCNE, HP B-series SAN Network Advisor, and possibly other products, allows remote attackers to execute arbitrary code by using a servlet to upload an executable file...

CVE-2013-6810

CVE-2013-6810 is an exploitable remote code execution vulnerability in EMC Connectrix Manager Converged Network Edition (CMCNE) via the Inmservlets.war FileUploadController. The issue arises from unauthenticated file upload where a crafted filename can lead to arbitrary file uploads and remote co...

CVE-2013-6810: Improper Control of Generation of Code

The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition CMCNE, HP B-series SAN Network Advisor, and possibly other products, allows remote attackers to execute arbitrary code by using a servlet to upload an executable file...

libjpeg: information leak (read of uninitialized memory)

The getsos function in jdmarker.c in 1 libjpeg 6b and 2 libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan SOS JPEG markers,...