ImageMagick 'WaveletDenoiseImage' Function Denial of Service Vulnerability - Mac OS X

ImageMagick is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

padaread.com XSS vulnerability

Vulnerable URL: http://padaread.com/?search=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 64928 VIP website status:| No Check padaread.com SSL connection:| Grade: F Coordinated...

VMware Fusion Insecure 'tpfc.dll' Code Execution Vulnerability - Mac OS X

VMware Fusion is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion";...

AIX 7.1 TL 4 : bellmail (IV92240) (deprecated)

https://vulners.com/cve/CVE-2017-1093 https://vulners.com/cve/CVE-2017-1093 IBM AIX could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

[SECURITY] Fedora 24 Update: libnl3-3.2.28-4.fc24

This package contains a convenience library to simplify using the Linux kernel's netlink sockets interface for network manipulation...

Uber: SMS URL verification link does not expire on phone number change and lacks rate limiting

When verifying your phone number attached to your Uber account, it was possible to re-use an old verification URL to validate a new cell phone number. In addition to this, there was no rate limiting on the SMS verification which allowed for it to be easily brute-forced. The internal team resolved...

ImageMagick MSL Interpreter Denial of Service Vulnerability - Mac OS X

ImageMagick is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ImageMagick 'coders/rle.c' Remote Buffer Overflow Vulnerability - Mac OS X

ImageMagick is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagemagick:imagemagick"...

Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-3169-4)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3169-4 advisory. Baozeng Ding discovered a race condition that could lead to a use-after- free in the Advanced Linux Sound Architecture ALSA subsystem of the Linux kernel...

Starting Page 1.3 - linkid SQL Injection

Starting Page 1.3 - linkid SQL Injection Vulnerability: Starting Page- SQL Injection Date: 10.01.2017 Vendor Homepage: http://software.friendsinwar.com/ Tested on: win10 Author: JaMbA Script link: http://software.friendsinwar.com/news.php?readmore=31 SQL Injection/Exploit : Vulnerable Parametre :...

Update Rollup 4 for System Center 2012 R2 Virtual Machine Manager

Update Rollup 4 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 4 for Microsoft System Center 2012 R2 Virtual Machine Manager VMM. There are two updates available for System Center 2012 R2 Virtual Machine Manager. On...

MS15-041: Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: April 14, 2015

MS15-041: Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: April 14, 2015 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .N...

Update Rollup 4 for System Center 2012 R2 Orchestrator – SPF

Update Rollup 4 for System Center 2012 R2 Orchestrator – SPF This article describes the issues that are fixed in Update Rollup 4 for Microsoft System Center 2012 R2 Orchestrator – Service Provider Foundation. Additionally, this article contains the installation instructions for Update Rollup 4 fo...

MS12-022: Description of the security update for Expression Design 4: March 13, 2012

MS12-022: Description of the security update for Expression Design 4: March 13, 2012 INTRODUCTION Microsoft has released security bulletin MS12-022. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

humoron.com XSS vulnerability

Vulnerable URL: http://www.humoron.com/?ft=%3C!%27/!%22/!%27/%22/--!%3E%3C/Title/%3C/script/%3E%3CInput/Autofocus/%0D/Onfocus=confirmOPENBUGBOUNTY//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

rofo.com XSS vulnerability

Vulnerable URL: http://www.rofo.com/NY/Liverpool?page=4'"--!...

CVE-2015-5706

Use-after-free vulnerability in the pathopenat function in fs/namei.c in the Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a denial of service or possibly have unspecified other impact via OTMPFILE filesystem operations that leverage a duplicate cleanup operation...

Storefront - generating event viewer warning - " The Receiver for Windows package file could not be found at the path"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Event viewer on storefront server is generating warning event ID 4 " The Receiver for Windows packag...

NIST Calls for Submissions to Secure Data Against Quantum Computing

For a layman, it may be difficult to fathom how a standards body could be playing catch-up to a threat that could be at least a decade away. But that’s the position NIST finds itself in with the risk that quantum computers pose to existing cryptographic algorithms. Working, practical quantum...

Ubuntu: Security Advisory (USN-3161-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...