CVE-2014-2388

The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows context-dependent attackers to read arbitrary files via 1 a session over a Wi-Fi network or 2 a session over a...

Design/Logic Flaw

The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows context-dependent attackers to read arbitrary files via 1 a session over a Wi-Fi network or 2 a session over a...

CVE-2014-2388

The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows context-dependent attackers to read arbitrary files via 1 a session over a Wi-Fi network or 2 a session over a...

Design/Logic Flaw

IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 do not properly protect credentials, which allows remo...

BlackBerry 10.x < 10.2.1.1925 Authentication Bypass

Binary data 8355.prm...

Juniper Networks JUNOS <= 7.1.1 Malformed TCP Packet Denial of Service and Unspecified Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/37670/info JUNOS is prone to a remote denial-of-service vulnerability that arises when the application handles specially crafted TCP packets. JUNOS is also prone to six other unspecified security vulnerabilities. These...

HP-UX 10.x rs.F3000 Unspecified Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6837/info The rs.F3000 binary is prone to an issue that may allow attackers to obtain unauthorized access to a vulnerable system. A denial of service attack is also possible. This is due to multiple instances of the syste...

VMware Workstation 10.x < 10.0.2 Windows 8.1 Guest Privilege Escalation (VMSA-2014-0005) (Linux)

The version of VMware Workstation installed on the remote host is version 10.x prior to 10.0.2. It is, therefore, reportedly affected by a privilege escalation vulnerability. A kernel NULL dereference flaw exists in VMware tools on Windows 8.1 guest hosts. An attacker could escalate his privilege...

CVE-2014-0527

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors...

BlackBerry 10.x < 10.2.0.1055 'qconnDoor' Buffer Overflow

Binary data 8217.prm...

CosmoShop ePRO安全绕过漏洞

Bugtraq ID:65924 CosmoShop是基于Magento的云电商系统。 CosmoShop不正确限制对数据库备份文件的访问，允许攻击者直接提交请求获取数据库备份文件。 0 Cosmoshop 10.x 目前没有详细解决方案提供： http://www.cosmoshop.de/produkte/cosmoshop-stufenlos-skalierbar.html...

HP StoreVirtual 4000/StoreVirtual VSA dbd_manager任意代码执行漏洞

Bugtraq ID:65770 CVE ID:CVE-2013-4841 HP StoreVirtual Storage是一个适用于虚拟化环境的横向扩展存储，支持所有业务的虚拟化需求。 HP StoreVirtual 4000和StoreVirtual VSA所使用的LeftHand OS相关dbdmanager存在一个未明错误，允许远程攻击者利用漏洞执行任意代码。 0 HP LeftHand OS 10.x HP StoreVirtual 4000 Storage HP StoreVirtual VSA 厂商补丁： HP ----- HP LeftHand OS version...

Microsoft Internet Explorer Multiple Vulnerabilities (2909921)

This host is missing a critical security update according to Microsoft Bulletin MS14-010. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-5427

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote attackers to hijack the authentication of...

Updated asterisk packages fix CVE-2013-7100

Updated asterisk packages fix security vulnerability: Buffer overflow in the unpacksms16 function in apps/appsms.c in Asterisk Open Source 1.8.x before 1.8.24.1, 10.x before 10.12.4, and 11.x before 11.6.1; Asterisk with Digiumphones 10.x-digiumphones before 10.12.4-digiumphones; and Certified...

Mozilla Thunderbird ESR Multiple Vulnerabilities (Aug 2012) - Windows

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Thunderbird ESR Security Bypass Vulnerabilities - Oct 12 (Mac OS X)

The host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdesrsecbypassvulnoct12macosx.nasl 6115 2017-05-12 09:03:25Z teissa $ Mozilla Thunderbird ESR Security Bypass Vulnerabilities - Oct 12 Mac OS X Authors:...

Mozilla Firefox ESR Security Bypass Vulnerabilities (Oct 2012) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox ESR Security Bypass Vulnerabilities (Oct 2012) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721,...