CVE-2013-2087

Multiple cross-site scripting XSS vulnerabilities in Gallery 3 before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 movie title to modules/gallery/controllers/movies.php or 2 key variable to modules/gallery/views/erroradmin.html.php...

Immunity Canvas: MS14_025

Name| ms14025 ---|--- CVE| CVE-2014-1812 Exploit Pack| CANVAS Description| ms14025 Notes| CVE Name: CVE-2014-1812 VENDOR: Microsoft Commandline: runmodule ms14-025 References: https://technet.microsoft.com/library/security/ms14-025 CVE Url:...

Microsoft SharePoint Services 3.0 Multiple Vulnerabilities (2952166)

This host is missing a critical security update according to Microsoft Bulletin MS14-022. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] Fedora 20 Update: mingw-qt5-qtbase-5.2.1-3.fc20

This package contains the Qt software toolkit for developing cross-platform applications. This is the Windows version of Qt, for use in conjunction with the Fedora Windows cross-compiler...

MS14-024: Description of the security update for the 2007 Office suite Service Pack 3 (SP3): May 13, 2014 (KB2880508)

None None...

ezEIP 3 /download.ashx 任意文件下载漏洞

No description provided by source...

CVE-2014-3138

SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1 Update 2 before Hotfix 3 allows remote authenticated users to execute arbitrary SQL commands via the PATHINFO to /docushare/dsweb/ResultBackgroundJobMultiple/. NOTE: some of the...

(RHSA-2014:0463) Low: Red Hat Enterprise Linux OpenStack Platform 3.0 - 90 Day Retirement Notice

In accordance with the Red Hat Enterprise Linux OpenStack Platform Support Policy, the one-year life cycle of Production Support for version 3 will end on July 31, 2014. On August 1, 2014, Red Hat Enterprise Linux OpenStack Platform version 3 will enter an inactive state and will no longer receiv...

ESA-2014-029: RSA® Access Manager Sensitive Information Disclosure Vulnerability

ESA-2014-029.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-029: RSA® Access Manager Sensitive Information Disclosure Vulnerability EMC Identifier: ESA-2014-029 CVE Identifier: CVE-2014-0646 Severity Rating: 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C Affected Products: · RSA Access Manager Server...

All instances of storage metadata are corrupted

Challenge A task in Veeam Backup & Replication fails with the error: All instances of storage metadata are corrupted. Copy Cause It's important first to understand what the "storage metadata" is. The storage metadata is akin to an MFT master file table for the Veeam Backup & Replication backup...

Morpho Itemiser 3 Hard-Coded Credential

OVERVIEW Independent researchers Billy Rios and Terry McCorkle have identified hard-coded credentials in the Morpho Itemiser 3. Morpho has not produced a patch, update, or new version that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The followin...

Updated systemd packages fix a buffer overflow

A stack-based buffer overflow was found in systemd-ask-password, a utility used to query a system password or passphrase from the user, using a question message specified on the command line. A local user could this flaw to crash the binary or even execute arbitrary code with the permissions of t...

CVE-2013-7196

static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication via a request with a modified valitemid parameter for the publication...

The Top 3 Security Issues in Federal Cloud Computing

A journalist recently asked me for my top three pressing concerns related to Federal cloud security. Here are a few points I had to offer up...

Exploit for Out-of-bounds Read in Openssl

heartbleed-dtls-test POC for CVE-2014-0160 Heartbleed for D...

Design/Logic Flaw

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors...

DSA-2899-1 openafs - security update

Bulletin has no description...

CVE-2014-0592

Barclamp aka barclamp-network 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs...

CVE-2014-0592

CVE-2014-0592 concerns Barclamp (aka barclamp-network) version 1.7 used in SUSE Cloud 3. It reports that the Crowbar Framework component does not enable netfilter on bridges when creating new instances, allowing remote attackers to bypass security group restrictions via unspecified vectors relate...

Threat Outbreak Alert: Fake Account Statement Email Messages on April 3, 2014

Medium Alert ID: 33634 First Published: 2014 April 3 12:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a account statement for the recipient. The text in the email message attempts to convince the recipient to open t...