Fedora 19 : postgresql-9.2.4-1.fc19 (2013-6148)

Update to PostgreSQL 9.2.4, for various fixes described at http://www.postgresql.org/docs/9.2/static/release-9-2-4. html including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901 - fix build for aarch64 and ppc64p7 Note that Tenable Network Security has extracted the preceding...

Fedora 19 : xen-4.2.1-10.fc19 (2013-5315)

make xendomains systemd script executable and update it from init.d version 919705, Potential use of freed memory in event channel operations XSA-47, CVE-2013-1920 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

[SECURITY] Fedora 19 Update: pdns-recursor-3.5-1.fc19

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

[SECURITY] Fedora 19 Update: gsi-openssh-6.1p1-5.fc19

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

[SECURITY] Fedora 19 Update: mod_security-2.7.3-1.fc19

ModSecurity is an open source intrusion detection and prevention engine for web applications. It operates embedded into the web server, acting as a powerful umbrella - shielding web applications from attacks...

Проверь Badoo на прочность! Месяц поиска уязвимостей

Цитата: Компания Badoo, вслед за своими коллегами ― крупнейшими представителями IT-индустрии, такими как Google, Facebook и Яндекс, начинает платить за найденные уязвимости. Мы объявляем конкурс «Проверь Badoo на прочность!», который стартует 19 марта и продлится ровно месяц. Участвовать в конкур...

EasyProWebTools.com <= Local File Inclusion Vulnerability

Exploit for php platform in category web applications EasyProWebTools.com = Local File Inclusion Vulnerability Date : 19/03/2013 Author : GoLdM Category : Local File Inclusion Google Dork : Powered By: EasyProWebTools.com EX 1: http://bigwo.com/index.php?page=Local File EX 2:...

At Pwn2Own, Browser Exploits Getting Harder, More Expensive to Find

VANCOUVER–The Pwn2Own contest has evolved in many ways over the years, from new rules to new targets to larger prizes, but perhaps the one thing that has changed the most is that the researchers who show up here every year hoping to go home with a bag full of money are having to spend more and mo...

Fedora 17 : axis-1.4-19.fc17 (2013-1194)

This update fixes a security vulnerability that caused axis not to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via andaarbitrary valid...

RHEL 5 : flash-plugin (RHSA-2012:1203)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:1203 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes several...

Loganalyzer 3.6.0 Cross Site Scripting

Product: LogAnalyzer Version: 3.6.0 Vendor: www.adiscon.com Vulnerability type: Cross Site Scripting Risk level: Low Vendor notification: 2012-12-15 Patch Release: 2012-12-19 Public disclosure: 2012-12-20 Author: Mohd Izhar Bin Ali aka johncrackernet Website: http://johncrackernet.blogspot.com...

Huawei (Multiple Products) - Password Encryption

Huawei Multiple Products - Password Encryption source: https://www.securityfocus.com/bid/56510/info Multiple Huawei products are prone to a weak password encryption weakness. Successful exploits may allow an attacker to decrypt stored passwords; this may aid in further attacks. The following are...

Debian Security Advisory DSA 2565-1 (iceweasel)

The remote host is missing an update to iceweasel announced via advisory DSA 2565-1. OpenVAS Vulnerability Test $Id: deb25651.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2565-1 iceweasel Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Adobe Flash Player Video File Heap Buffer Overflow (APSB12-19; CVE-2012-4167)

A remote code execution vulnerability has been reported in Adobe Flash Player...

Adobe Flash Player Malformed Tag Memory Corruption (CVE-2012-4163; APSB12-19)

A denial of service vulnerability has been reported in Adobe Flash Player...

Adobe Flash Player Malformed Byte Code Remote Code Execution (APSB12-19; CVE-2012-4165)

A remote code execution vulnerability has been reported in Adobe Flash Player...

Gentoo Security Advisory GLSA 201209-19 (nut)

The remote host is missing updates announced in advisory GLSA 201209-19. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201209-19 (nut)

The remote host is missing updates announced in advisory GLSA 201209-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-201209-19 : NUT: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201209-19 NUT: Arbitrary code execution An error in the addchar function in parseconf.c may cause a buffer overflow. Impact : A remote attacker could send a specially crafted string to upsd, possibly resulting in execution of...

Fedora 18 : xen-4.1.3-4.fc18 (2012-13536)

disable qemu monitor by default XSA-19, CVE-2012-4411 855141 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...