Fedora 15 : maniadrive-1.2-32.fc15.1 / php-5.3.9-1.fc15 / php-eaccelerator-0.9.6.1-9.fc15.1 (2012-0420)

Security Enhancements and Fixes in PHP 5.3.9 : - Added maxinputvars directive to prevent attacks based on hash collisions. CVE-2011-4885 - Fixed bug 60150 Integer overflow during the parsing of invalid exif header. CVE-2011-4566 Full upstream changelog : http://www.php.net/ChangeLog-5.php5.3.9 No...

CVE-2011-4789

creationtimestamp| type| source ---|---|--- 2012-01-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18423 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/hpmagentservice.rb 2025-02-06 03:13:40+00:00| seen|...

[SECURITY] [DSA 2394-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2394-1 [email protected] http://www.debian.org/security/ Luciano Bello January 27, 2012 http://www.debian.org/security/faq -...

DEBIAN-CVE-2011-1940

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inject arbitrary web script or HTML via a crafted table name that triggers improper HTML rendering on a Tracking page, related to 1 libraries/tbllinks.inc.php and...

CVE-2011-1941

Open redirect vulnerability in the redirector feature in phpMyAdmin 3.4.x before 3.4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2011-1941

CVE-2011-1941 corresponds to an open redirect vulnerability in the redirector feature of phpMyAdmin 3.4.x prior to 3.4.1. The issue allows remote attackers to redirect users to arbitrary websites, facilitating phishing-style abuse. Public sources in the connected documents corroborate the affecte...

CVE-2011-1940

CVE-2011-1940 affects phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1. The vulnerability is a cross-site scripting (XSS) flaw triggered by supplying a crafted table name on the Tracking page, which causes improper HTML rendering. The root causes are located in two components: libraries/tb...

HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution

Added: 01/26/2012 CVE: CVE-2011-4786 BID: 51396 OSVDB: 78306 Background HP Easy Printer Care Software is a tool to control and monitor up to 20 HP printers. Problem HP Easy Printer Care Software 2.5 and prior versions are vulnerable to remote code execution. The CacheDocumentXMLWithId method from...

SuSE 11.1 Security Update : GnuTLS (SAT Patch Number 5684)

This update for GnuTLS provides the following fixes : - Fix typo in patch for gnutls-cli that can cause a crash. bnc659907 - Fix Buffer overflow in the gnutlssessiongetdata function in lib/gnutlssession.c , when used on a client that performs nonstandard session resumption, allows remote TLS...

BitDefender Internet Security 2011 - Pointer Vulnerability

Document Title: =============== BitDefender Internet Security 2011 - Pointer Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=149 Release Date: ============= 2012-01-26 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2011-0748

creationtimestamp| type| source ---|---|--- 2012-01-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18419...

CVE-2011-1682

creationtimestamp| type| source ---|---|--- 2012-01-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18419...

BitDefender Internet Security 2011 - Pointer Vulnerability

Document Title: =============== BitDefender Internet Security 2011 - Pointer Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=149 Release Date: ============= 2012-01-26 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2011-4276

The CVE-2011-4276 issue affects Android 2.3 before 2.3.6, where the Bluetooth service (com/android/phone/BluetoothHeadsetService.java) allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer. Root cause is a flaw in the Bluetooth service handling AT phon...

CVE-2011-4276

The Bluetooth service com/android/phone/BluetoothHeadsetService.java in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer...

CVE-2011-4123

...

CVE-2011-4123

CVE-2011-4123 is a duplicate of CVE-2011-3874. The underlying issue is a vulnerability in Android's libsysutils (FrameworkListener::dispatchCommand) on affected Android versions (2.2.x–2.3.x) that can lead to remote code execution when handling command arguments. Multiple sources describe a stack...

CVE-2011-3479

CVE-2011-3479 concerns Symantec pcAnywhere 12.5.x–12.5.3 and IT Management Suite pcAnywhere Solution 7.0/7.1, which use world-writable permissions on product-installation files. This enables local users to gain privileges by modifying a file. Connected sources corroborate the affected products an...

CVE-2011-3478

CVE-2011-3478 affects Symantec pcAnywhere 12.5.x (and IT Management Suite pcAnywhere Solution 7.0/7.1) where the host-services login/authentication data is not properly filtered, enabling remote code execution via a crafted session over TCP port 5631. The root cause is a buffer/unsafe handling du...

CVE-2011-4772

CVE-2011-4772 affects the Android app 360 KouXin (com.qihoo360.kouxin) version 1.5.3. The issue is improper data protection that allows remote attackers to read or modify SMS messages and a contact list via a crafted application. Root cause: insufficient protection of sensitive data. Impact: conf...