88 matches found
bu.edu XSS vulnerability
Vulnerable URL: https://www.bu.edu/phpbin/hilleldining/guest/guestforgotpw.php?email=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 13.12.2017 Latest check for patch:| 13.12.2017 21:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
Moderate: Red Hat Security Advisory: Red Hat JBoss Data Virtualization security and bug fix update
An update is now available for Red Hat JBoss Data Virtualization. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Moderate: Red Hat Security Advisory: Red Hat JBoss BRMS security update
An update is now available for Red Hat JBoss BRMS. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
SOL57108702 - Apache Tika XML External Entity vulnerability CVE-2016-4434
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
CVE-2016-4434
It was found that the parsing of OOXML, XMP in PDF, and some other file formats by Apache Tika would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XX...
CVE-2014-4434
CVE-2014-4434 affects the Apple OS X kernel prior to 10.10. A physically proximate attacker can cause a denial of service by crafting a filename on an HFS filesystem, leading to a NULL pointer dereference and system crash. The provided connected sources reiterate this description but do not offer...
openSUSE Security Update : dropbear (openSUSE-SU-2013:1696-1)
dropbear was updated to version 2013.60 to fix following bugs : - Fix 'make install' so that it doesn't always install to /bin and /sbin - Fix 'make install MULTI=1', installing manpages failed - Fix 'make install' when scp is included since it has no manpage - Make --disable-bundled-libtom work ...
openSUSE Security Update : dropbear (openSUSE-SU-2013:1616-1)
dropbear was updated to version 2013.60 to fix following bugs : - Fix 'make install' so that it doesn't always install to /bin and /sbin - Fix 'make install MULTI=1', installing manpages failed - Fix 'make install' when scp is included since it has no manpage - Make --disable-bundled-libtom work ...
Mandriva Linux Security Advisory : dropbear (MDVSA-2013:261)
Updated dropbear package fixes security vulnerability : Possible memory exhaustion denial of service due to the size of decompressed payloads in dropbear before 2013.59 CVE-2013-4421. Inconsistent delays in authorization failures could be used to disclose the existence of valid user accounts in...
UBUNTU-CVE-2013-4434
Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames...
CVE-2013-4434
Dropbear SSH Server before 2013.59 is affected by CVE-2013-4434: authentication error messages reveal valid usernames via different delay depending on account existence. Public docs confirm the issue and cite a patch release (2013.60) that fixes this and related CVE-2013-4421; openSUSE/Mandriva a...
CVE-2013-4434
Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames...
Updated dropbear packages fix CVE-2013-4421
Updated dropbear package fixes security vulnerability: Possible memory exhaustion denial of service due to the size of decompressed payloads in dropbear before 2013.59 CVE-2013-4421. Inconsistent delays in authorization failures could be used to disclose the existence of valid user accounts in...
Sendmail < 8.13.8 Header Processing Overflow DoS
The remote mail server is running a version of Sendmail earlier than 8.13.8. Such versions are reportedly affected by a use-after-free flaw that may allow an attacker to crash the server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17724; scriptversion"1.9";...
Microsoft Windows AppLocker规则本地安全绕过漏洞(CVE-2011-4434)
Bugtraq ID: 50687 CVE ID：CVE-2011-4434 AppLocker是Windows 7和Windows Server 2008 R2中的一项新增功能，提供应用程序的访问控制。 通过AppLocker规则控制运行在Windows7或Windows Server 2008 R2上的应用程序时，本地用户可使用某些应用程序中的宏或脚本功能绕过AppLocker规则，如使用Microsoft Office来绕过这个限制。 因此%TEMP%或%system...
CVE-2011-4434
CVE-2011-4434 affects Windows 7 SP1 and Windows Server 2008 R2 SP1. It describes a local bypass of AppLocker rules via (1) Office macro or (2) scripting features, demonstrable with SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags. Root cause: AppLocker not properly enforcing rules for certain...
SuSE 11.1 Security Update : dbus (SAT Patch Number 4434)
Local users could crash the D-Bus daemon by sending a specially crafted message CVE-2010-4352. This update also properly fixes CVE-2008-3834 / CVE-2009-1189. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...
CVE-2010-4434
Technical details about CVE-2010-4434 are not provided in the supplied documents; no specifics on affected versions, root cause, or impact are included. Monitor for updates.
CVE-2009-4434
CVE-2009-4434 affects IDevSpot iSupport 1.8 and earlier. A directory traversal flaw in index.php allows remote attackers to read arbitrary files via .. in the include_file parameter. NVD lists CVSSv2 base score 5.0 (Medium), network vector, low attack complexity, no authentication, partial confid...