SuSE 10 Security Update : jasper (ZYPP Patch Number 7878)

The following bug has been fixed : - Specially crafted JPEG2000 files could have caused a heap buffer overflow in jasper. CVE-2011-4516 / CVE-2011-4517 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

CVE-2011-4642

creationtimestamp| type| source ---|---|--- 2011-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18245 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/splunkmappyexec.rb 2025-02-06 03:13:40+00:00| seen|...

RHEL 4 / 5 : pidgin (RHSA-2011:1820)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1820 advisory. - pidgin libpurple: Invalid UTF-8 string handling in OSCAR messages CVE-2011-4601 - pidgin: Multiple NULL pointer deference flaws by...

Fedora 16 : dhcp-4.2.3-4.P1.fc16 (2011-16981)

CVE-2011-4539 dhcpd: DoS due to processing certain regular expressions Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

UBUNTU-CVE-2011-4594

The syssendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service system crash via crafted use of the sendmmsg system call, leading to an incorrect pointer dereference...

2 Bit Counter - Schaltanlage Deutsche Post

Document Title: =============== 2 Bit Counter - Schaltanlage Deutsche Post References: =========== Download: http://www.vulnerability-lab.com/resources/videos/358.wmv View: http://www.youtube.com/watch?v=pUC-JQRIEws Release Date: ============= 2011-12-15 Vulnerability Laboratory ID VL-ID:...

CVE-2011-4644

creationtimestamp| type| source ---|---|--- 2011-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18245...

RHEL 6 : pidgin (RHSA-2011:1821)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1821 advisory. - pidgin libpurple: Invalid UTF-8 string handling in OSCAR messages CVE-2011-4601 - pidgin: Multiple NULL pointer deference flaws by...

ZDI-11-347 : Microsoft Office Word Hidden Border Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-347 : Microsoft Office Word Hidden Border Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-347 December 13, 2011 - -- CVE ID: CVE-2011-1983 - -- CVSS: 9, AV:N/AC:L/Au:N/C:C/I:P/A:P - -- Affected Vendors:...

Microsoft Publisher无效指针远程代码执行漏洞(MS11-091)

BUGTRAQ ID: 50949 CVE ID: CVE-2011-3411 Microsoft Publisher是微软公司发行的桌面出版应用软件。 Microsoft Publisher处理特制.pub文件的方式中存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码 Microsoft Publisher 2007 SP3 Microsoft Publisher 2007 SP2 Microsoft Publisher 2007 SP1 Microsoft Publisher 2003 SP3 Microsoft Publisher 2003 SP3 临时解决方法...

Microsoft PowerPoint OfficeArt远程代码执行漏洞(MS11-094)

BUGTRAQ ID: 50964 CVE ID: CVE-2011-3413 PowerPoint是一个由Microsoft公司开发的演示文稿程序，是Microsoft Office系统中的其中一个组件。它支持Microsoft WindowsApple的Mac OS X操作系统。 PowerPoint处理特制.ppt文件的方式中存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码。 Microsoft Office 2008 for Mac Microsoft Office 2007 Microsoft PowerPoint 2007 临时解决方法：...

Fedora 15 : arora-0.11.0-3.fc15 (2011-14756)

Fixes CVE-2011-3367, an input validation flaw. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Zabbix < 1.8.9 SQLi Vulnerability

Zabbix is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zabbix:zabbix";...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Moderate: Red Hat Security Advisory: dhcp security update

Updated dhcp packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

As the year draws to a close…

We’ve compiled our list of the Top Security Stories of 2011, presented here in no particular order. These are the issues that shook the world’s markets and kept us awake at night. If there’s a lesson here, it’s that cybersecurity challenges aren’t going away anytime soon. In fact, as we look...

CVE-2011-2742

Summary: CVE-2011-2742 affects EMC RSA Adaptive Authentication On-Premise (AAOP). The issue is that AAOP 6.0.2.1 SP1 Patch 2/3, SP2/SP2 Patch 1, and SP3 does not perform forensic evaluation when device tokens are received from mobile apps, potentially allowing a mobile device to bypass applicatio...

CVE-2011-2463

Cross-site scripting XSS vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the cfform tag...

CVE-2011-2463

CVE-2011-2463 is a cross-site scripting (XSS) vulnerability affecting Adobe ColdFusion 8.0 through 9.0.1, exploitable via vectors involving the cfform tag to inject arbitrary script/HTML into a user’s browser. Public sources describe multiple XSS issues in ColdFusion and confirm that Adobe releas...

CVE-2011-4368

Cross-site scripting XSS vulnerability in Remote Development Services RDS in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...