CVE-2014-0740

Cross-site request forgery CSRF vulnerability in the Call Detail Records Analysis and Reporting CAR interface in the OS Administration component in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to hijack the authentication of administrators for requests...

CVE-2014-0740

CVE-2014-0740 is a CSRF vulnerability in the Cisco Unified Communications Manager (Unified CM) OS Administration interface, specifically in the Call Detail Records Analysis and Reporting (CAR) web UI. Affected versions are Unified CM 10.0(1) and earlier. The root cause is insufficient CSRF protec...

Oracle Linux 5 : Moderate: / bind (ELSA-2007-0740)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0740 advisory. 9.2.4-27.0.1.el4 - fixed cryptographically weak query id generator CVE-2007-2926 Tenable has extracted the preceding description block directly from the Oracle...

Mac OS X v10.6.8 Multiple Vulnerabilities (2011-004)

This host is missing an important security update according to Mac OS X 10.5.8 Update/Mac OS X Security Update 2011-004. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-004.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.8 Multiple Vulnerabilities 2011-004 Authors: Antu Sanadi Copyright:...

CVE-2011-0740

Cross-site scripting XSS vulnerability in magpie/scripts/magpieslashbox.php in RSS Feed Reader 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the rssurl parameter...

CVE-2011-0740

CVE-2011-0740 is a Cross-site Scripting (XSS) vulnerability in the WordPress RSS Feed Reader Plugin 0.1, specifically in the magpie/scripts/magpie_slashbox.php file and its rss_url parameter. Attackers could inject arbitrary JavaScript/HTML in a victim’s browser. The issue is confirmed by multipl...

CVE-2011-0740

creationtimestamp| type| source ---|---|--- 2011-01-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35261...

Fedora 13 : openssl-1.0.0-1.fc13 (2010-5744)

Update to final release of upstream version 1.0.0. The update fixes important security vulnerabilities: CVE-2009-3245, CVE-2009-4355, CVE-2010-0433, and CVE-2010-0740. Refer to upstream CHANGES file for the detailed list of changes. Note that Tenable Network Security has extracted the preceding...

Fedora 12 : openssl-1.0.0-4.fc12 (2010-8742)

This update fixes multiple bugs and security issues. It especially adds support for RFC5746. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora Update for openssl FEDORA-2010-9421

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SOL11533 - OpenSSL vulnerability CVE-2010-0740

The ssl3getrecord function in ssl/s3pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service crash via a malformed record in a TLS connection that triggers a NULL pointer de-reference, related to the minor version number. Information about this advisory is...

Fedora Update for openssl FEDORA-2010-8742

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for openssl MDVSA-2010:076-1 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:076-1 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

OpenSSL - Remote Denial of Service

OpenSSL - Remote Denial of Service / hoagieopensslrecordofdeath.c OPENSSL REMOTE DENIAL-OF-SERVICE EXPLOIT - OpenSSL 0.9.8m short = 16 bit - OpenSSL 0.9.8f through 0.9.8m short != 16 bit CVE-2010-0740 Bug discovered by: Bodo Moeller and Adam Langley Google Philip Olausson...

CVE-2010-0740

creationtimestamp| type| source ---|---|--- 2010-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12334...

Mandriva Update for openssl MDVSA-2010:076 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:076 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for openssl FEDORA-2010-5357

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[slackware-security] openssl

New openssl packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2010-0433 https://vulners.com/cve/CVE-2010-0740 A...

OpenSSL TLS连接记录处理拒绝服务漏洞

CVE ID: CVE-2010-0740 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 在TLS连接中，某些错误格式的小版本号记录可能会在OpenSSL的ssl/s3pkt.c文件的ssl3getrecord函数中触发空指针引用，导致拒绝服务的情况。 OpenSSL Project OpenSSL 0.9.8f - 0.9.8m 厂商补丁： OpenSSL Project --------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-0740

The ssl3getrecord function in ssl/s3pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service crash via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained...