Security Bulletin: Mozilla firefox vulnerability issues on IBM SONAS (CVE-2014-1493, CVE-2014-1497, CVE-2014-1505, CVE-2014-1508, CVE-2014-1509, CVE-2014-1510, CVE-2014-1511, CVE-2014-1512, CVE-2014-1513, CVE-2014-1514)

Summary SONAS is shipped with Mozilla firefox, for which fixes are available for security vulnerabilities. Vulnerability Details CVEID: CVE-2014-1493 CVE-2014-1497 CVE-2014-1505 CVE-2014-1508 CVE-2014-1509 CVE-2014-1510 CVE-2014-1511 CVE-2014-1512 CVE-2014-1513 CVE-2014-1514 DESCRIPTION: SONAS is...

D-Link DGS-1510 - Multiple Vulnerabilities

================ get-user-info.py ================ import re import os.path import urllib2 import base64 import gzip import zlib from StringIO import StringIO from io import BytesIO def makerequests: """Calls request functions sequentially.""" response = None responseText = None...

Authentication Bypass Vulnerability in D-Link DGS-1510 Switches

The D-Link DGS-1510 series is the next generation of intelligent managed switches. An authentication bypass vulnerability exists in the D-Link DGS-1510 Switches. The vulnerability is exploited to allow an attacker to execute commands on the switches and extract the configuration and obtain user...

Security Bypass Vulnerability in Multiple D-Link DGS-1510 Websmart Devices

The D-Link DGS-1510-28XMP is an Ethernet switch from AUO D-Link. A full bypass vulnerability exists in multiple D-Link DGS-1510 Websmart devices, which can be exploited by remote attackers to submit a special request for unauthorized command execution...

Multiple D-Link DGS-1510 Websmart Information Disclosure Vulnerabilities

D-Link DGS-1510-28XMP and others are Ethernet switches from AUO D-Link. A security vulnerability exists in multiple D-Link DGS-1510 Websmart devices that allows remote attackers to submit a special request to obtain sensitive information...

CVE-2017-6205

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Command Bypass attacks via unspecified vectors...

CVE-2017-6206

CVE-2017-6206 affects multiple D-Link DGS-1510 Websmart switches (models DGS-1510-28XMP/28X/52X/52/28P/28/20) with firmware prior to 1.31.B003. The issue enables unauthenticated information disclosure via unspecified vectors, impacting confidentiality (per CVSS). The NVD entry lists network acces...

CVE-2017-6205

CVE-2017-6205 affects D-Link DGS-1510 Websmart switches (models: DGS-1510-28XMP/28X/52X/52/28P/28/20). Firmware prior to 1.31.B003 is vulnerable to an unauthenticated command bypass via unspecified vectors. The connected documents confirm the affected devices and the unauthenticated bypass, but d...

BisonWare BisonFTP Server 3.5 Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'BisonWare BisonFTP Server Buffer Overflow', 'Description' = %q BisonWare BisonFTP Server 3.5 is prone to an overflow condition. This...

Oracle: Security Advisory (ELSA-2014-0310)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for pigz FEDORA-2015-1510

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-1510

creationtimestamp| type| source ---|---|--- 2014-08-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34448 2015-10-15 22:07:40+00:00| seen| MISP/56201e1d-f4dc-4ddd-8049-4f2e950d210b 2018-05-29 15:50:33+00:00| seen|...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2014:0448-1)

Mozilla Firefox was updated to version 28.0, receiving enhancements, bug and security fixes. Mozilla NSPR was updated to 4.10.4 receiving enhancements, bug and security fixes. Mozilla NSS was updated to 3.15.5 receiving enhancements, bug and security fixes. Changes in MozillaFirefox : - update to...

openSUSE: Security Advisory for MozillaThunderbird, seamonkey (openSUSE-SU-2014:0584-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MozillaThunderbird,seamonkey (important)

Mozilla Thunderbird was updated to 24.4.0. Mozilla SeaMonkey was updated to 2.25. MFSA 2014-15/CVE-2014-1493/CVE-2014-1494 Miscellaneous memory safety hazards MFSA 2014-17/CVE-2014-1497 bmo966311 Out of bounds read during WAV file decoding MFSA 2014-18/CVE-2014-1498 bmo935618...

Debian DSA-2911-1 : icedove - security update

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client. Multiple memory safety errors, out of bound reads, use-after-frees and other implementation errors may lead to the execution of arbitrary code, information disclosure or denial o...

SuSE Update for MozillaFirefox openSUSE-SU-2014:0448-1 (MozillaFirefox)

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201404481.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for MozillaFirefox openSUSE-SU-2014:0448-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH,...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2014:0448-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox ESR Multiple Vulnerabilities-01 (Mar 2014) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Ubuntu: Security Advisory (USN-2151-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...