OracleVM 2.2 : xen (OVMSA-2013-0033)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix error in first version of the XSA-44 patch Chuck Anderson orabug 16632878, 16694867 CVE-2013-1917 - clear EFLAGS.NT in SYSENTER entry path Andrew Cooper orabug 16632878 CVE-2013-1917 - fix various...

CVE-2014-6920

The Canal 44 aka com.canal.canal44 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Command injection

The Canal 44 aka com.canal.canal44 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6920

The CVE-2014-6920 entry concerns the Canal 44 Android app (1.0) failing to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The affected software, vulnerability class, and impact are descr...

freebsd/x86 chown 0:0 , chmod 6755 & execve /tmp/sh 44 bytes

No description provided by source. / FreeBSD shellcode chown/tmp/sh, 0, 0; chmod/tmp/sh, 06755; 44 bytes Claes M. Nyberg 20020209 [email protected], [email protected] / / void mainvoid asm xor %eax, %eax eax = 0 pushl %eax string ends with NULL pushl $0x68732f2f push 'hs//' //sh pushl...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2012:0917-1)

Mozilla Thunderbird was updated to version 14.0 bnc771583 - MFSA 2012-42/CVE-2012-1949/CVE-2012-1948 Miscellaneous memory safety hazards - MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-20 12-1952 Gecko memory corruption - MFSA 2012-45/CVE-2012-1955 bmo757376 Spoofing issue with...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2014:0640-1)

This is a MozillaThunderbird update to version 24.5.0 : - MFSA 2014-34/CVE-2014-1518 Miscellaneous memory safety hazards - MFSA 2014-37/CVE-2014-1523 bmo969226 Out of bounds read while decoding JPG images - MFSA 2014-38/CVE-2014-1524 bmo989183 Buffer overflow when using non-XBL object as XBL - MF...

Amazon Linux AMI : mysql (ALAS-2012-44)

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page, listed in the References section. CVE-2011-2262 , CVE-2012-0075 , CVE-2012-0087 , CVE-2012-0101 , CVE-2012-0102 , CVE-2012-0112 ,...

Fedora 17 : xen-4.1.5-1.fc17 (2013-6723)

Thu Apr 25 2013 Michael Young - 4.1.5-1 - update to xen-4.1.5 includes fixes for passed through IRQs or PCI devices might allow denial of service attack XSA-46, CVE-2013-1919 953568 SYSENTER in 32-bit PV guests on 64-bit xen can crash hypervisor XSA-44, CVE-2013-1917 953569 grant releases can...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2012:0899-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for seamonkey openSUSE-SU-2012:0935-1 (seamonkey)

Check for the Version of seamonkey OpenVAS Vulnerability Test $Id: gbsuse201209351.nasl 8249 2017-12-27 06:29:56Z teissa $ SuSE Update for seamonkey openSUSE-SU-2012:0935-1 seamonkey Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

DSA-2469-1 linux-2.6 - several

Bulletin has no description...

MozillaThunderbird: Update to Mozilla Thunderbird 3.1.14 (important)

Mozilla Thunderbird was updated to version 3.1.14, fixing various bugs and security issues. MFSA 2011-36: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory...

Mozilla Firefox Location Bar Spoofing Vulnerability

No description provided by source. Exploit Title: MOZILLA FIREFOX LOCATION BAR SPOOFING VULNERABILITY Date: 2009-12-18 Author: Jordi Chancel Software Link: http://www.mozilla.org/security/announce/2009/mfsa2009-69.html Version: Mozilla Firefox 3.0.15 & 3.5.5 Tested on: Windows XP-VISTA-SEVEN &...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1202)

MozillaFirefox was updated to the 3.0.13 release, fixing some security issues and bugs : MFSA 2009-44 / CVE-2009-2654: Security researcher Juan Pablo Lopez Yacubian reported that an attacker could call window.open on an invalid URL which looks similar to a legitimate URL and then use document.wri...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-233)

This update brings MozillaFirefox to version 3.0.3, fixing a number of bugs and security problems : MFSA 2008-44 / CVE-2008-4067 / CVE-2008-4068: resource: traversal vulnerabilities MFSA 2008-43: BOM characters stripped from JavaScript before execution CVE-2008-4065: Stripped BOM characters bug...

openSUSE Security Update : mozilla-xulrunner190 (mozilla-xulrunner190-234)

This update brings the mozilla-xulrunner190 engine to version 1.9.0.3, fixing a number of bugs and security problems : MFSA 2008-44 / CVE-2008-4067 / CVE-2008-4068: resource: traversal vulnerabilities MFSA 2008-43: BOM characters stripped from JavaScript before execution CVE-2008-4065: Stripped B...

openSUSE Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-237)

This update brings mozilla-xulrunner181 to security fix version 1.8.1.17. It contains the following security fixes: MFSA 2008-45 / CVE-2008-4069: XBM image uninitialized memory reading MFSA 2008-44 / CVE-2008-4067 / CVE-2008-4068: resource: traversal vulnerabilities MFSA 2008-43: BOM characters...

openSUSE 10 Security Update : seamonkey (seamonkey-5657)

This patch updates SeaMonkey to version 1.1.12, fixing security and other bugs : MFSA 2008-45 / CVE-2008-4069: XBM image uninitialized memory reading MFSA 2008-44 / CVE-2008-4067 / CVE-2008-4068: resource: traversal vulnerabilities MFSA 2008-43: BOM characters stripped from JavaScript before...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-5655)

This update brings Mozilla Thunderbird to version 2.0.0.17. It contains the following security fixes: MFSA 2008-46 / CVE-2008-4070: Heap overflow when canceling a newsgroup message MFSA 2008-44 / CVE-2008-4067 / CVE-2008-4068: resource: traversal vulnerabilities MFSA 2008-43: BOM characters...