Adobe Shockwave Player <= 11.6.3.633 Multiple Code Execution Vulnerabilities (APSB12-02) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.6.3.633 or earlier. It is, therefore, affected by multiple code execution vulnerabilities. - Multiple memory corruption issues exist related to the Shockwave 3D Asset that allow code execution. CVE-2012-0757,...

Adobe Shockwave Player <= 11.6.4.634 Multiple Memory Corruption Vulnerabilities (APSB12-13) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.6.4.634 or earlier. It is, therefore, affected by multiple unspecified memory corruption vulnerabilities. A remote attacker can exploit these issues by tricking a user into viewing a malicious Shockwave file, resulti...

Juniper Junos Space < 13.1R1 MySQL Multiple Vulnerabilities (JSA10601)

According to its self-reported version number, the remote Junos Space version is prior to 13.1R1. It is, therefore, affected by multiple vulnerabilities related to the installed MySQL version. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid80193; scriptversion"1.4";...

Fedora 20 : sagemath-6.1.1-6.fc20 (2014-16667)

Add patch for CVE-2012-4230. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Adobe Shockwave Player <= 11.6.7.637 Multiple Vulnerabilities (APSB12-23) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is equal to or prior than 11.6.7.637. It is, therefore, affected by the following vulnerabilities : - Several unspecified errors exist that can lead to buffer overflow vulnerabilities and possible code execution...

RHEL 5 / 6 / 7 : Red Hat JBoss Enterprise Application Platform 6.3.2 (RHSA-2014:2019)

The remote Redhat Enterprise Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:2019 advisory. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. It was...

A EXCEL the vulnerabilities the sample shellcode analysis-vulnerability warning-the black bar safety net

0x00 causes Recently I got a EXCEL samples, allegedly an over-all anti-virus of 0day, after the analysis after a let me disappointed, this is a 2 0 1 2-year old vulnerability, not 0day the. Although not picked to the 0day, but this sample of shellcode is still quite distinctive, it is indeed...

CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix

It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject's Common Name CN field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially...

CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix

It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject's Common Name CN field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.2 security update

Updated Red Hat JBoss Enterprise Application Platform 6.3.2 packages that fix three security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores,...

CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix

It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject's Common Name CN field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially...

CentOS 6 : kernel (CESA-2014:1997)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

glibc: arbitrary code execution

CVE-2012-3406 arbitrary code execution The vfprintf function in stdio-common/vfprintf.c in GNU C Library does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFYSOURCE format-string protection...

Oracle Linux 6 : kernel (ELSA-2014-1997)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1997 advisory. - x86 traps: stop using IST for SS Petr Matousek 1172810 1172811 CVE-2014-9322 - fs udf: Avoid infinite loop when processing indirect ICBs Jacob...

Jaangle 0.98i.977 Denial Of Service

jaangle 0.98i.977 Denial of Service Vulnerability Author: hadji samir , [email protected] Download : http://www.jaangle.com/downloading?block Tested : Windows 7 fr DATE : 2012-12-13 EAX 000000C0 ECX 00000000 EDX 00000000 EBX 00000003 ESP 01C5FE28 EBP 01C5FF88 ESI 00000002 EDI 002B4A98 EIP 776964F4...

openSUSE Security Update : apache2 (openSUSE-SU-2014:1647-1)

This apache version update fixes various security and non security issues. - Updated to the 2.2.29 - Changes between 2.2.22 and 2.2.29: http://www.apache.org/dist/httpd/CHANGES2.2 - The following patches are no longer needed and were removed : - httpd-2.2.x-bnc798733-SNIignorecase.diff -...

Oracle database vulnerability analysis: the need for a username and password to access your database-vulnerability warning-the black bar safety net

Summary General database vulnerabilities that are in a successful connection or login to the database after the invasion; this article describes two in 2 0 1 2 years of exposure to the Oracle, by these two vulnerabilities combined may not grasp the username/password of the case of the invasion of...

jaangle 0.98i.977 - Denial of Service

jaangle 0.98i.977 Denial of Service Vulnerability Author: hadji samir , [email protected] Download : http://www.jaangle.com/downloading?block Tested : Windows 7 fr DATE : 2012-12-13 EAX 000000C0 ECX 00000000 EDX 00000000 EBX 00000003 ESP 01C5FE28 EBP 01C5FF88 ESI 00000002 EDI 002B4A98 EIP 776964F4...

jaangle 0.98i.977 - Denial of Service

jaangle 0.98i.977 - Denial of Service jaangle 0.98i.977 Denial of Service Vulnerability Author: hadji samir , [email protected] Download : http://www.jaangle.com/downloading?block Tested : Windows 7 fr DATE : 2012-12-13 EAX 000000C0 ECX 00000000 EDX 00000000 EBX 00000003 ESP 01C5FE28 EBP 01C5FF88 E...

F5 Networks BIG-IP : Apache HTTP server vulnerability (SOL15901)

Multiple cross-site scripting XSS vulnerabilities in the makevariantlist function in modnegotiation.c in the modnegotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted...