Apple Safari Multiple Vulnerabilities-01 (Sep 2015) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

CVE-2015-3732

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3732

CVE-2015-3732 affects WebKit/WebKit2 used in Apple iOS and Safari; the root cause is memory corruption in WebKit leading to remote code execution or memory corruption crashes when visiting crafted sites. Connected advisories confirm a fix: WebKit2 updated to version 2.10.9 (Mageia/MGASA-2016-0116...

CVE-2012-3732

CVE-2012-3732 concerns Apple iOS Mail: when processing S/MIME signed messages, the From field is used as the displayed sender, allowing spoofed content if the From address does not match the signer’s identity. Connected Apple security notes indicate this is addressed by displaying the signer-rela...

CVE-2011-3732

eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/fckeditor/editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php and certain other files...

CVE-2011-3732

EggBlog 4.1.2 is affected by an information-disclosure vulnerability where remote attackers can obtain sensitive data by directly requesting certain PHP files, causing an error message to reveal the installation path (e.g., _lib/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts...

CVE-2010-3732

CVE-2010-3732 affects IBM DB2 UDB 9.5 prior to FP6a, specifically the DRDA Services component. The issue allows remote authenticated users to trigger a denial of service (database server ABEND) by issuing a prepared statement with a large number of parameter markers via the client CLI on Linux, U...

CVE-2009-3732

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console aka VMrc allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2009-3732

CVE-2009-3732 is a VMware Remote Console (VMrc) format-string vulnerability in vmware-vmrc.exe build 158248 that allows remote code execution via a malicious page or URL. Exploitation requires luring the VMrc user to open a crafted page; code executes with the privileges of the logged-on user. Th...

VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2010-0007 Synopsis: VMware hosted products, vCenter Server and ESX patches resolve multiple security issues Issue date: 2010-04-09...

CVE-2009-3732

creationtimestamp| type| source ---|---|--- 2010-04-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12188...

SLES9: Security update for ipsec-tools

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ipsec-tools For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5011524 within the...

CVE-2008-3732

Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TTA file, which triggers a heap-based buffer overflow. NOTE: some of these details are...

CVE-2008-3732

VLC Media Player (version around 0.8.6i) is affected by CVE-2008-3732 due to an integer overflow in the Open() function (modules/demux/tta.c). This causes a heap-based buffer overflow that can lead to remote denial of service (crash) and potentially remote code execution when a crafted TTA file i...

CVE-2006-3732

Cisco Security Monitoring, Analysis and Response System CS-MARS before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information...

CentOS 3 / 4 : ipsec-tools (CESA-2006:0267)

Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel and includes racoon, an IKE...

RHEL 3 / 4 : ipsec-tools (RHSA-2006:0267)

Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel and includes racoon, an IKE...

ipsec security update

CentOS Errata and Security Advisory CESA-2006:0267 Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec...

Moderate: Red Hat Security Advisory: ipsec-tools security update

Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel and includes racoon, an IKE...

[SECURITY] [DSA 965-1] New ipsec-tools packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 965-1 [email protected] http://www.debian.org/security/ Martin Schulze February 6th, 2006 http://www.debian.org/security/faq -...