Updated systemd packages fix security vulnerability

In systemd prior to 234 a race exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race like this may lead to denial of service, unti...

theatlantic.com XSS vulnerability

Vulnerable URL: http://www.theatlantic.com/live/events/?topic=other" onmouseover%3dprompt'OPENBUGBOUNTY'%3d" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1049 VIP website status:| Yes Check theatlantic.com SSL...

Adobe Acrobat < 11.0.16 / 15.006.30172 / 15.016.20039 Multiple Vulnerabilities (APSB16-14)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 11.0.16, 15.006.30172, or 15.016.20039. It is, therefore, affected by multiple vulnerabilities. - Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat...

CVE-2016-1075

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-1065

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-1049

This CVE-2016-1051 is referenced in Debian DLA-1161-1 for a Redis security update. The bulletin describes a Cross Protocol Scripting issue where certain HTTP-like strings could be mishandled by Redis, potentially enabling craftable input to affect processing. Debian patched Redis in the Wheezy br...

Siemens SCALANCE X-200IRT Switch Family User Impersonation Vulnerability

OVERVIEW Siemens has identified a user impersonation vulnerability in its SCALANCE X-200IRT Switch Family. Siemens has produced a firmware update that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Siemens reports that the vulnerability affects the...

Siemens SCALANCE X-200IRT < 5.2.0 Session Hijacking

Binary data scadasiemensscalancex200cve-2015-1049.nbin...

CVE-2015-1049

CVE-2015-1049 affects Siemens SCALANCE X-200IRT switches with firmware versions prior to 5.2.0. The vulnerability arises from improper authentication in the device web server, allowing remote attackers to hijack an authenticated user’s web session (session impersonation) via unspecified vectors. ...

Amazon Linux AMI : php54 (ALAS-2013-212)

A buffer overflow flaw was found in the way PHP parsed deeply nested XML documents. If a PHP application used the xmlparseintostruct function to parse untrusted XML content, an attacker able to supply specially crafted XML could use this flaw to crash the application or, possibly, execute arbitra...

CentOS 5 / 6 : php (CESA-2013:1049)

Updated php packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2013-1049

Buffer overflow in the RFC1413 ident client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service crash and possibly execute arbitrary code via a crafted response...

CVE-2013-1049

CVE-2013-1049 affects the cfingerd RFC1413 ident client. The issue is a remote-exploitable buffer overflow in the ident handling of cfingerd 1.4.3-3, which can cause a crash and may allow arbitrary code execution via a crafted response. Debian notes the vulnerability as remote and fixed it in 1.4...

Debian DSA-2635-1 : cfingerd - buffer overflow

Malcolm Scott discovered a remote-exploitable buffer overflow in the RFC1413 ident client of cfingerd, a configurable finger daemon. This vulnerability was introduced in a previously applied patch to the cfingerd package in 1.4.3-3. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 2635-1] cfingerd security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2635-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 1, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2635-1] cfingerd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2635-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 1, 2013 http://www.debian.org/security/faq -...

CVE-2012-1049

CVE-2012-1049 affects ManageEngine ADManager Plus 5.2 (Build 5210). The vulnerability is multiple cross-site scripting (XSS) flaws triggered by user input in the jsp/AddDC.jsp domainName parameter and in DomainConfig.do operation parameter, allowing arbitrary HTML/script execution in a victim’s b...

Zoho ManageEngine ADManager Plus Multiple Cross Site Scripting Vulnerabilities

This host is running Zoho ManageEngine ADManager Plus and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageengineadmanagerplusmultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Zoho ManageEngine ADManager Plus Multiple Cross Site Scripting...

CVE-2012-1049

creationtimestamp| type| source ---|---|--- 2012-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36667 2012-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36666...

Ubuntu: Security Advisory (USN-1049-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...