6114 matches found
[SECURITY] Fedora 19 Update: libxml2-2.9.1-1.fc19
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
[SECURITY] Fedora 19 Update: qemu-1.4.1-1.fc19
QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...
Fedora 19 : php-twig-Twig-1.12.3-1.fc19 (2013-6077)
Updated to version 1.12.3 See: http://blog.twig.sensiolabs.org/post/47461911874/security-release-twig -1-12-3-released Full change log: https://github.com/fabpot/Twig/blob/v1.12.3/CHANGELOG Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Fedora 19 : phpMyAdmin-3.5.8-1.fc19 (2013-5604)
phpMyAdmin 3.5.8.0 2013-04-08 =============================== - bug MariaDB reported as MySQL - bug Incorrect header for Safari 6.0 - bug Attempt to open trigger for edit gives NULL - change Use HTML5 DOCTYPE - security Self-XSS on GIS visualisation page, reported by Janek Vind - bug Incorrect...
Fedora 19 : postgresql-9.2.4-1.fc19 (2013-6148)
Update to PostgreSQL 9.2.4, for various fixes described at http://www.postgresql.org/docs/9.2/static/release-9-2-4. html including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901 - fix build for aarch64 and ppc64p7 Note that Tenable Network Security has extracted the preceding...
Fedora 19 : xen-4.2.1-10.fc19 (2013-5315)
make xendomains systemd script executable and update it from init.d version 919705, Potential use of freed memory in event channel operations XSA-47, CVE-2013-1920 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
[SECURITY] Fedora 19 Update: pdns-recursor-3.5-1.fc19
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...
[SECURITY] Fedora 19 Update: gsi-openssh-6.1p1-5.fc19
SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...
[SECURITY] Fedora 19 Update: mod_security-2.7.3-1.fc19
ModSecurity is an open source intrusion detection and prevention engine for web applications. It operates embedded into the web server, acting as a powerful umbrella - shielding web applications from attacks...
Проверь Badoo на прочность! Месяц поиска уязвимостей
Цитата: Компания Badoo, вслед за своими коллегами ― крупнейшими представителями IT-индустрии, такими как Google, Facebook и Яндекс, начинает платить за найденные уязвимости. Мы объявляем конкурс «Проверь Badoo на прочность!», который стартует 19 марта и продлится ровно месяц. Участвовать в конкур...
EasyProWebTools.com <= Local File Inclusion Vulnerability
Exploit for php platform in category web applications EasyProWebTools.com = Local File Inclusion Vulnerability Date : 19/03/2013 Author : GoLdM Category : Local File Inclusion Google Dork : Powered By: EasyProWebTools.com EX 1: http://bigwo.com/index.php?page=Local File EX 2:...
At Pwn2Own, Browser Exploits Getting Harder, More Expensive to Find
VANCOUVER–The Pwn2Own contest has evolved in many ways over the years, from new rules to new targets to larger prizes, but perhaps the one thing that has changed the most is that the researchers who show up here every year hoping to go home with a bag full of money are having to spend more and mo...
Fedora 17 : axis-1.4-19.fc17 (2013-1194)
This update fixes a security vulnerability that caused axis not to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via andaarbitrary valid...
RHEL 5 : flash-plugin (RHSA-2012:1203)
The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:1203 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes several...
Loganalyzer 3.6.0 Cross Site Scripting
Product: LogAnalyzer Version: 3.6.0 Vendor: www.adiscon.com Vulnerability type: Cross Site Scripting Risk level: Low Vendor notification: 2012-12-15 Patch Release: 2012-12-19 Public disclosure: 2012-12-20 Author: Mohd Izhar Bin Ali aka johncrackernet Website: http://johncrackernet.blogspot.com...
Huawei (Multiple Products) - Password Encryption
Huawei Multiple Products - Password Encryption source: https://www.securityfocus.com/bid/56510/info Multiple Huawei products are prone to a weak password encryption weakness. Successful exploits may allow an attacker to decrypt stored passwords; this may aid in further attacks. The following are...
Debian Security Advisory DSA 2565-1 (iceweasel)
The remote host is missing an update to iceweasel announced via advisory DSA 2565-1. OpenVAS Vulnerability Test $Id: deb25651.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2565-1 iceweasel Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Adobe Flash Player Video File Heap Buffer Overflow (APSB12-19; CVE-2012-4167)
A remote code execution vulnerability has been reported in Adobe Flash Player...