1498 matches found
D-Link DIR-100 1.12 Security Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31050/info D-Link DIR-100 is affected by a vulnerability that allows attackers to bypass security restrictions and access sites that are blocked by an administrator. D-Link DIR-100 devices with firmware 1.12 are vulnerabl...
Microsoft NetMeeting 3.0.1 4.4.3385 Remote Desktop Sharing DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1798/info The Remote Desktop Sharing component of Microsoft NetMeeting for Windows NT 4.0 / 2000 does not properly handle a particular type of malformed input string sent over port 1720. CPU utilization can be caused to...
ZyWALL 100 HTTP Referer Header - Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29110/info ZyWALL 100 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Fedora 19 : kernel-3.14.8-100.fc19 (2014-7426)
The 3.14.8 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
CVE-2014-4021
Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors...
openSUSE Security Update : seamonkey (openSUSE-SU-2013:1644-1)
update to SeaMonkey 2.22 bnc847708 - rebased patches - requires NSS 3.15.2 or higher - MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592 Miscellaneous memory safety hazards - MFSA 2013-94/CVE-2013-5593 bmo868327 Spoofing addressbar through SELECT element - MFSA 2013-95/CVE-2013-5604...
Fedora 19 : kernel-3.13.11-100.fc19 (2014-5609)
The 3.13.11 stable kernel update contains a number of important fixes across the tree. The 3.13.10 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenab...
Fedora 19 : kernel-3.13.9-100.fc19 (2014-4849)
The 3.13.9 stable update contains a number of important fixes across the tree. The 3.13.8 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
Fedora Update for kernel FEDORA-2014-4360
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : kernel-3.13.7-100.fc19 (2014-4360)
The 3.13.7 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
D-Link DIR-100多个安全漏洞
BUGTRAQ ID: 65290 CVECAN ID: CVE-2013-7051,CVE-2013-7052,CVE-2013-7053,CVE-2013-7054,CVE-2013-7055 D-Link DIR-100是集成了防火墙功能的小型宽带路由器。 D-Link DIR-100以太网宽带路由器没有正确限制对管理员Web接口的访问权、对cliget.cgi脚本的访问权、也没有对HTTP请求进行有效性验证，在实现上存在多个安全漏洞，攻击者可利用这些漏洞非法访问受限制功能、获取管理员凭证或其他敏感设置、更改管理员密码等。 0 D-Link DIR-100 4.03B07 厂商补丁...
Microsoft Mitigation Bypass Bug Bounty Winner Yang Yu
Yang Yu is no stranger to writing mitigation bypasses for Microsoft Windows products. A year ago at the CanSecWest conference in Vancouver, the 35-year-old security researcher from Beijing did an extensive presentation on bypassing Address Space Layout Randomization ASLR and Data Execution...
D-Link DIR-100 - Multiple Vulnerabilities
D-Link DIR-100 - Multiple Vulnerabilities Title: Router D-Link DIR-100 Multiple Vulnerabilities Date: 2013-09-19 Author: Felix Richter Contact: [email protected] Vulnerable Software: ftp://ftp.dlink.de/dir/dir-100/driversoftware/DIR-100fwrevd403b07ALLde20120410.zip Patched Software:...
D-Link DIR-100 CSRF / XSS / Disclosure / Authentication
D-Link DIR-100 routers suffer from multiple authentication, credential management, cross site request forgery, cross site scripting, and information disclosure vulnerabilities. Title: Router D-Link DIR-100 Multiple Vulnerabilities Date: 2013-12-18 Author: Felix Richter Contact: email protected...
D-Link DIR-100 - Multiple Vulnerabilities
Title: Router D-Link DIR-100 Multiple Vulnerabilities Date: 2013-09-19 Author: Felix Richter Contact: [email protected] Vulnerable Software: ftp://ftp.dlink.de/dir/dir-100/driversoftware/DIR-100fwrevd403b07ALLde20120410.zip Patched Software:...
D-Link DIR-100 CSRF / XSS / Disclosure / Authentication
Title: Router D-Link DIR-100 Multiple Vulnerabilities Date: 2013-12-18 Author: Felix Richter Contact: [email protected] Vulnerable Software: ftp://ftp.dlink.de/dir/dir-100/driversoftware/DIR-100fwrevd403b07ALLde20120410.zip Patched Software:...
NTP Amplification Flaw To Blame For Gaming DDoS Attacks
US-CERT has issued an advisory that warns enterprises about distributed denial of service attacks flooding networks with massive amounts of UDP traffic using publicly available network time protocol NTP servers. Known as NTP amplification attacks, hackers are exploiting something known as the...
MS13-100: Description of the security update for SharePoint Server 2013 (coreserverloc): December 10, 2013
The security update addresses the vulnerabilities by correcting how SharePoint server sanitizes specially crafted page content.INTRODUCTIONMicrosoft has released security bulletin MS13-100. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
MS13-100: Description of the security update for Office Web Apps Server: December 10, 2013
The security update addresses the vulnerabilities by correcting how SharePoint server sanitizes specially crafted page content.INTRODUCTIONMicrosoft has released security bulletin MS13-100. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
SuSE 11.2 Security Update : MozillaFirefox (SAT Patch Number 8545)
Mozilla Firefox was updated to the 17.0.10ESR release, fixing various bugs and security issues : - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption und...