Novell iPrint Client ActiveX GetPrinterURLList2 Memory Corruption - Ver2 (CVE-2011-4185)

A memory corruption vulnerability has been reported in Novell iPrint Client ActiveX control. The vulnerability is due to improper validation of user-supplied string parameters. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...

Microsoft Excel Buffer Overrun in ToolbarDef Buffer Overflow - Ver2 (CVE-2011-0097)

A buffer overflow vulnerability has been reported in Microsoft Excel. An attacker could exploit this vulnerability a crafted 400h substream in an Excel file, which triggers a stack-based buffer overflow. Successful exploitation of this vulnerability could allow a remote attacker to execute...

Microsoft PowerPoint Techno-color Time Bandit Code Execution - Ver2 (CVE-2011-0655)

A code execution vulnerability has been reported in Microsoft PowerPoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Font Library File Buffer Overflow - Ver2 (CVE-2011-2003)

A buffer overflow vulnerability has been reported in Microsoft Windows. The vulnerability is due to an input validation error when the kernel parses a .FON font file. A remote attacker could exploit this issue by enticing a target user to open a specially crafted .FON file...

Microsoft Publisher Invalid Pointer Code Execution - Ver2 (CVE-2011-3411)

A code execution inclusion vulnerability has been reported in Microsoft Office Publisher. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft GDI EMF Image Processing Integer Overflow - Ver2 (CVE-2011-0041)

A integer overflow vulnerability has been reported in Microsoft GDI+. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Google Android Vold Volume Manager Integer Wrap Root Exploit Privilege Escalation - Ver2 (CVE-2011-1823)

A privilege escalation vulnerability has been reported in Google Android Operating System. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Microsoft Publisher Function Pointer Overwrite (MS11-091) - Ver2 (CVE-2011-1508)

A memory corruption vulnerability has been reported in Microsoft Publisher. The vulnerability is due to the way Microsoft Publisher does not properly handle memory for function pointers while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by enticing a...

Microsoft Office Excel Label Record Buffer Overflow (MS11-021) - Ver2 (CVE-2011-0098)

A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to a flaw in the parsing of Label record in Excel documents, causing a buffer overflow. Remote attackers can exploit this vulnerability by enticing target users to open a malicious Excel file. In ...

Apache Tomcat Parameter Hash Collision Denial of Service - Ver2 (CVE-2011-4858)

A denial-of-service vulnerability has been reported in Apache Software Foundation Tomcat. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

CVE-2011-3628

Untrusted search path vulnerability in pammotd aka the MOTD module in libpam-modules before 1.1.3-2ubuntu2.1 on Ubuntu 11.10, before 1.1.2-2ubuntu8.4 on Ubuntu 11.04, before 1.1.1-4ubuntu2.4 on Ubuntu 10.10, before 1.1.1-2ubuntu5.4 on Ubuntu 10.04 LTS, and before 0.99.7.1-5ubuntu6.5 on Ubuntu 8.0...

CVE-2011-3628

CVE-2011-3628 is an untrusted search path vulnerability in pam_motd (MOTD module) in libpam-modules. It affects Ubuntu releases where libpam-modules versions predating the listed fixes: before 1.1.3-2ubuntu2.1 on 11.10, before 1.1.2-2ubuntu8.4 on 11.04, before 1.1.1-4ubuntu2.4 on 10.10, before 1....

CVE-2011-3628

Untrusted search path vulnerability in pammotd aka the MOTD module in libpam-modules before 1.1.3-2ubuntu2.1 on Ubuntu 11.10, before 1.1.2-2ubuntu8.4 on Ubuntu 11.04, before 1.1.1-4ubuntu2.4 on Ubuntu 10.10, before 1.1.1-2ubuntu5.4 on Ubuntu 10.04 LTS, and before 0.99.7.1-5ubuntu6.5 on Ubuntu 8.0...

CVE-2011-5278

CVE-2011-5278 describes an SQL injection in the MyBB plugin MyBB Advanced Forum Signatures (afsignatures), specifically in signature.php for version 2.0.4. An attacker can remotely exploit the afs_bar_right parameter to execute arbitrary SQL commands. The vulnerability, classified with a base CVS...

CVE-2011-4958

CVE-2011-4958 describes a cross-site scripting (XSS) vulnerability in the SSViewer.php process function of SilverStripe. The flaw allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to template placeholders in affected releases: SilverStripe < 2.3.13 and SilverS...

ESA-2014-009: RSA BSAFE® SSL-J Multiple Vulnerabilities

ESA-2014-009.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-009: RSA BSAFE® SSL-J Multiple Vulnerabilities EMC Identifier: ESA-2014-009 CVE Identifier: CVE-2011-1473, CVE-2014-0625, CVE-2014-0626, CVE-2014-0627 Severity Rating: CVSS v2 Base Score: See below for individual scores...

ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities

ESA-2013-039.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities EMC Identifier: ESA-2013-039 CVE Identifier: CVE-2011-3389, CVE-2013-0169 Severity Rating: CVSS v2 Base Score: Refer NVD http://nvd.nist.gov/ for individual scores for each CVE...

Important: Red Hat Security Advisory: Red Hat JBoss BRMS 6.0.1 update

Red Hat JBoss BRMS 6.0.1, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base score...

Important: Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.0.1 update

Red Hat JBoss BPM Suite 6.0.1, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

CVE-2011-4573

Red Hat JBoss Operations Network JON before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail...