CVE-2007-2833

Emacs 21 allows user-assisted attackers to cause a denial of service crash via certain crafted images, as demonstrated via a GIF image in vm mode, related to image size calculation...

Fedora 21 : bugzilla-4.4.10-1.fc21 (2015-15768)

Security fix for CVE-2015-4499 A security problem was found in supported versions of Bugzilla. Login names longer than 127 characters can be corrupted, which could lead to the creation of a user account with an unexpected email address. Bugzilla 4.4.10 fixes the issue for the 4.4 branch of...

[SECURITY] Fedora 21 Update: bugzilla-4.4.10-1.fc21

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

[SECURITY] Fedora 21 Update: java-1.8.0-openjdk-1.8.0.65-3.b17.fc21

The OpenJDK runtime environment...

Default credentials

The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21...

CVE-2015-3968

Summary of CVE-2015-3968 : The Janitza UMG power quality devices (models 508, 509, 511, 604, 605) expose an FTP interface protected by a default/password-hardcoded credential, enabling remote attackers to read or write files via TCP port 21. The root cause is weak/default credentials in the devic...

CVE-2015-3968

The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21...

[SECURITY] Fedora 21 Update: pixman-0.32.8-1.fc21

Pixman is a pixel manipulation library for X and cairo...

[SECURITY] Fedora 21 Update: drupal7-active_tags-2.0-0.9.alpha1.fc21

Active Tags adds a new option to free tagging taxonomies. If selected the taxonomy widget is replaced by a new jQuery enabled tag entry widget. This package provides the following Drupal 7 module: activetags...

Memory corruption

WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-3 an...

CVE-2015-7002

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

[SECURITY] Fedora 21 Update: ganglia-3.7.2-6.fc21

Ganglia is a scalable, real-time monitoring and execution environment with all execution requests and statistics expressed in an open well-defined XML format...

[SECURITY] Fedora 21 Update: drupal7-jquery_update-2.6-1.fc21

Upgrades the version of jQuery in Drupal core to a newer version of jQuery. This package provides the following Drupal module: jqueryupdate...

[SECURITY] Fedora 21 Update: mbedtls-1.3.14-1.fc21

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...

Threat Outbreak Alert RuleID18861: Email Messages Distributing Malicious Software on October 21, 2015

Medium Alert ID: 41642 First Published: 2015 October 22 14:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18861 may contain the following files: Name |...

springfieldspringfield.co.uk XSS vulnerability

Vulnerable URL: http://www.springfieldspringfield.co.uk/moviescripts.php?order=A'"%26%25=1 Details: Description| Value ---|--- Patched:| Yes, at 11.11.2015 Latest check for patch:| 11.11.2015 14:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 47293 Google...

Threat Outbreak Alert RuleID18857: Email Messages Distributing Malicious Software on October 21, 2015

Medium Alert ID: 41635 First Published: 2015 October 21 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18857 may contain the following files: Name |...

Threat Outbreak Alert RuleID18830: Email Messages Distributing Malicious Software on October 21, 2015

Medium Alert ID: 41628 First Published: 2015 October 21 13:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18830 may contain the following files: Name |...

wsws.org XSS vulnerability

Vulnerable URL: https://www.wsws.org/en/search.html?sectionId=workspace%3A%2F%2FSpacesStore%2Fdf95a748-f560-4286-b023-b98ab42aec9E=100=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E=Search Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017...

Microsoft Bounty Programs Expansion - .NET Core and ASP.NET Beta Bounty

Today, I have another exciting expansion of the Microsoft Bounty Programs to announce. Please visit https://aka.ms/bugbounty to find out more. I’ll be discussing this new bounty in my talk at SyScan360 on October 21, 2015. We are delighted to offer a bounty for the .NET Core and ASP.NET Beta whic...