139 matches found
Moderate: Red Hat Security Advisory: squid security update
An update for squid is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Moderate: Red Hat Security Advisory: squid34 security update
An update for squid34 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
RHEL 6 : squid34 (RHSA-2016:1140)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2016:1140 advisory. The squid34 packages provide version 3.4 of Squid, a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP...
squid security update
7:3.1.23-16.4 - Related: 1334489 - CVE-2016-4554 CVE-2016-4556 squid: various flaws 7:3.1.23-16.3 - Resolved: 1334489 - CVE-2016-4554 CVE-2016-4556 squid: various flaws - Related: 1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 squid: various flaws 7:3.1.23-16.2 - Related: 13305...
Squid 3.x < 3.5.17 / 4.x < 4.0.9 Esi.cc Multiple Vulnerabilities
According to its banner, the version of Squid running on the remote host is 3.x prior to 3.5.17 or 4.x prior to 4.0.9. It is, therefore, affected by multiple vulnerabilities : - An assertion fault exists in file esi/Esi.cc that is triggered when handling ESI responses. An unauthenticated, remote...
Debian DLA-478-1 : squid3 security update
Several security issues have been discovered in the Squid caching proxy. CVE-2016-4051 CESG and Yuriy M. Kaminskiy discovered that Squid cachemgr.cgi was vulnerable to a buffer overflow when processing remotely supplied inputs relayed through Squid. CVE-2016-4052 CESG discovered that a buffer...
CVE-2016-4052
Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes ESI responses...
CVE-2016-4052
Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes ESI responses...
CVE-2016-4052
CVE-2016-4052 is a Squid vulnerability where buffer overflows occur while processing ESI responses, enabling a remote attacker to cause a DoS or potentially execute arbitrary code. Affected releases include Squid 3.x before 3.5.17 and 4.x before 4.0.9. Connected advisories confirm multiple mitiga...
CVE-2016-4052
Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes ESI responses...
squid: multiple issues
CVE-2016-4051 denial of service Due to incorrect buffer management Squid cachemgr.cgi tool is vulnerable to a buffer overflow when processing remotely supplied inputs relayed to it from Squid. - CVE-2016-4052 denial of service Due to buffer overflow issues Squid is vulnerable to a denial of...
Microsoft Internet Explorer Multiple Vulnerabilities (2976627)
This host is missing a critical security update according to Microsoft Bulletin MS14-051. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-4052
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...
CVE-2014-4052
CVE-2014-4052 affects Microsoft Internet Explorer 9 and 10. The connected sources describe a memory-corruption vulnerability exploitable via a crafted web site, enabling remote code execution or a denial of service. Open-source advisories (e.g., ZDI-14-280) specify a use-after-free in handling of...
GNU libc/regcomp(3) Multiple Vulnerabilities
No description provided by source. source: http://securityreason.com/securityalert/8003 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GNU libc/regcomp3 Multiple Vulnerabilities Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - - Dis.: 01.10.2010 - - Pub.:...
MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service
MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service http://cxsecurity.com/ YouTube Kaspersky PoC: https://www.youtube.com/watch?v=joa9IS7U90 ---- 0. Where is the problem? ---- Some time ago I have reported vulnerabilities in regcomp in BSD implementation CVE-2011-3336 and GNU li...
CVE-2013-4052
Cross-site scripting XSS vulnerability in the UDDI Administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-4052
CVE-2013-4052 is an XSS vulnerability in the UDDI Administrative console of IBM WebSphere Application Server. The issue affects WAS versions 6.1 (before 6.1.0.47), 7.0 (before 7.0.0.31), 8.0 (before 8.0.0.8), and 8.5 (before 8.5.5.1). IBM Security Bulletins document multiple APARs under the same ...
Cross-Site Scripting (XSS) in Jease
Advisory ID: HTB23104 Product: Jease Vendor: jease.org Vulnerable Versions: 2.8 and probably prior Tested Version: 2.8 Vendor Notification: July 25, 2012 Public Disclosure: August 15, 2012 Vulnerability Type: Cross-Site Scripting CWE-79 CVE Reference: CVE-2012-4052 CVSSv2 Base Score: 4.3...
CVE-2012-4052
CVE-2012-4052 concerns a cross-site scripting (XSS) vulnerability in Jease prior to 2.9. The issue arises when creating a comment, where the POST parameters for the fields (author, subject, comment) are not properly sanitized, allowing an attacker to inject arbitrary HTML/JavaScript executed in t...