Debian DLA-27-1 : file security update

Fix various denial of service attacks : CVE-2014-3487 The cdfreadpropertyinfo function does not properly validate a stream offset, which allows remote attackers to cause a denial of service application crash via a crafted CDF file. CVE-2014-3480 The cdfcountchain function in cdf.c in does not...

Threat Outbreak Alert RuleID8337KVR: Email Messages Distributing Malicious Software on January 27, 2016

Medium Alert ID: 37998 First Published: 2015 March 23 15:36 GMT Last Updated: 2016 January 28 13:48 GMT Version: 26 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID8337KVR...

Threat Outbreak Alert RuleID14151: Email Messages Distributing Malicious Software on March 27, 2015

Medium Alert ID: 37982 First Published: 2015 March 23 12:46 GMT Last Updated: 2015 March 27 12:31 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14151 and...

Threat Outbreak Alert RuleID13759: Email Messages Distributing Malicious Software on February 27, 2015

Medium Alert ID: 37637 First Published: 2015 February 27 21:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13759 may contain the following files: Name |...

Unfixed XSS vulnerability at www.i-mxms.com

Security researcher DevaDraco, has submitted on 27/02/2015 a cross-site-scripting XSS vulnerability affecting www.i-mxms.com, which at the time of submission ranked 20181176 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...

Fedora 21 : ntp-4.2.6p5-27.fc21 (2015-1736)

Security fix for CVE-2014-9297, CVE-2014-9298 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. File dat...

Threat Outbreak Alert RuleID13294: Email Messages Distributing Malicious Software on January 27, 2015

Medium Alert ID: 37183 First Published: 2015 January 27 20:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13294 may contain the following files: Name |...

Threat Outbreak Alert RuleID13286: Email Messages Distributing Malicious Software on January 27, 2015

Medium Alert ID: 37178 First Published: 2015 January 27 15:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13286 may contain the following files: Name |...

Fedora Update for curl FEDORA-2014-16690

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : curl-7.29.0-27.fc19 (2014-16690)

make CURLOPTLOWSPEEDLIMIT work again with threaded resolver 1172572 - allow to use TLS 1.1 and TLS 1.2 1153814 - disable libcurl-level downgrade to SSLv3 1166567 - low-speed-limit: avoid timeout flood 1166239 - fix handling of CURLOPTCOPYPOSTFIELDS in curleasyduphandle CVE-2014-3707 Note that...

Security update for flash-player (important)

flash-player received a security update to version to 11.2.202.425 bsc909219, which fixes: APSB14-27, CVE-2014-0580, CVE-2014-0587, CVE-2014-8443, CVE-2014-9162, CVE-2014-9163, CVE-2014-9164...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

OracleVM 2.2 : xen (OVMSA-2012-0058)

The remote OracleVM system is missing necessary patches to address critical security updates : XSA-27: hvm: Limit the size of large HVM op batches orabug 15907978 CVE-2012-5511 XSA-29: add missing guest address range checks to XENMEMexchange handlers orabug 15907996 CVE-2012-5513 XSA-30: xen: fix...

Threat Outbreak Alert RuleID12129: Email Messages Distributing Malicious Software on October 27, 2014

Medium Alert ID: 36201 First Published: 2014 October 28 10:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12129 may contain the following files: Name |...

Threat Outbreak Alert RuleID12122: Email Messages Distributing Malicious Software on October 27, 2014

Medium Alert ID: 36198 First Published: 2014 October 27 15:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12122 may contain the following files: Name |...

PayPal Inc BB #107 MOS - Persistent History Vulnerability

Document Title: =============== PayPal Inc BB 107 MOS - Persistent History Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1048 PayPal Security UID: dq115aYq Release Date: ============= 2014-10-27 Vulnerability Laboratory ID VL-ID:...

printsearch.de Open Redirect vulnerability

Open Bug Bounty ID: OBB-50034 Description| Value ---|--- Affected Website:| printsearch.de Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerab...

Threat Outbreak Alert RuleID10814: Email Messages Distributing Malicious Software on July 27, 2014

Medium Alert ID: 35058 First Published: 2014 July 29 14:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10814 may contain the following files: Name | Siz...

Hummingbird Connectivity 10 SP5 LPD Buffer Overflow

No description provided by source. $Id: hummingbirdexceed.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

GOM Player ActiveX Control Buffer Overflow

No description provided by source. $Id: gomopenurl.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...