109 matches found
Security Bulletin: A security vulnerability has been identified in IBM Tivoli / Security Directory Server
Summary Web Administration tool is shipped with IBM Tivoli / Security Directory Server. It is susceptible to a denial of service attack. Vulnerability Details CVEID: CVE-2015-1976 DESCRIPTION: IBM Security Directory Server could allow an authenticated user to execute commands into the web...
justauto.com.au XSS vulnerability
Open Bug Bounty ID: OBB-527390 Description| Value ---|--- Affected Website:| justauto.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2015-1976
CVE-2015-1976 affects IBM Security Directory Server (including IBM Tivoli Directory Server) where an authenticated user could issue commands via the web administration tool, potentially crashing the tool. IBM’s bulletin lists affected versions up to 6.4.0.6 (and earlier 6.x line variants) and pro...
CVE-2016-1976
Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...
CVE-2016-1976
Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...
CVE-2016-1976
CVE-2016-1976 is a use-after-free in the DesktopDisplayDevice class of Firefox WebRTC on Windows, allowing remote denial of service (and possibly other impacts) before Firefox 45.0. Vulnerable component: WebRTC implementation in Mozilla Firefox; root cause is use-after-free in DesktopDisplayDevic...
Oracle: Security Advisory (ELSA-2012-1211)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2013-0869)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2014-1976)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2013-0870)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 7 : rpm (ELSA-2014-1976)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1976 advisory. - Fixes CVE-2014-8118 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...
RHEL 5 / 6 : JBoss Web Server (RHSA-2013:0871)
Updated tomcat6 and tomcat7 packages that fix one security issue are now available for JBoss Enterprise Web Server 2.0.0 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS...
openSUSE Security Update : tomcat (openSUSE-SU-2013:1307-1)
Tomcat was updated to fix security issues and bug: CVE-2013-1976: Avoid a potential symlink race during startup of the tomcat server, where a local attacker that gaine access to the tomcat chroot could escalate privileges to root. CVE-2013-2067:...
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:1064-1)
Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 - MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards - MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-20 12-1975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/ CVE-2012-3959...
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:1065-1)
Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 - MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards - MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-20 12-1975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/ CVE-2012-3959...
Demaecan for Android SSL证书校验安全绕过漏洞
Bugtraq ID:66247 CVE ID:CVE-2014-1976 Demaecan for Android是一款基于安卓系统的应用。 Demaecan for Android不正确校验SSL服务器证书，允许可中间人攻击的攻击者伪造证书窃听敏感信息。 0 Demaecan for Android 用户可联系厂商获得相应的升级或补丁程序： https://play.google.com/store/apps/details?id=com.demaecan.androidapp&hl=ja...
CVE-2014-1976
Demaecan for Android (2.1.0 and earlier) does not verify SSL/TLS X.509 certificates, enabling MITM attackers to spy on encrypted traffic by presenting a crafted certificate. Affected component: SSL certificate verification in the Android app. Impact: potential information disclosure from intercep...
SuSE 11.2 / 11.3 Security Update : tomcat6 (SAT Patch Numbers 8155 / 8156)
This update of tomcat6 fixes : - apache-tomcat-CVE-2012-3544.patch. bnc831119 - use chown --no-dereference to prevent symlink attacks on log bnc822177c7/prevents CVE-2013-1976 - Fix tomcat init scripts generating malformed classpath http://youtrack.jetbrains.com/issue/JT-18545 bnc804992 patch fro...
Oracle Linux 6 : tomcat6 (ELSA-2013-0869)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0869 advisory. - Related: rhbz955976 CVE-2013-1976. Changed log location - Resolves: rhbz956771 Related: CVE-2012-3439 digest - Resolves: rhbz955976 CVE-2013-1976...