CVE-2016-4680

CVE-2016-4680 affects Apple kernels across iOS (pre-10.1), tvOS (pre-10.0.1), and watchOS (pre-3.1). The vulnerability exposes kernel memory via a crafted app due to multiple input-validation issues in MIG-generated code, enabling a local attacker to disclose kernel memory. Apple addressed this i...

SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2017:0102-1)

This update of freeradius-server fixes several issues. Security issue fixed : - CVE-2015-4680: Fixed Insufficent CRL application for intermediate certificates bsc935573 Non security issues fixed : - Allows FreeRadius Server to start on SUSE Linux Enterprise Server 12 SP2 systems by relaxing a too...

SUSE-SU-2017:0102-1 Security update for freeradius-server

This update of freeradius-server fixes several issues. Security issue fixed: - CVE-2015-4680: Fixed Insufficent CRL application for intermediate certificates bsc935573 Non security issues fixed: - Allows FreeRadius Server to start on SUSE Linux Enterprise Server 12 SP2 systems by relaxing a too...

Apple TV < 10.0.1 Multiple Vulnerabilities

Binary data 9757.prm...

About the security content of tvOS 10.0.1

About the security content of tvOS 10.0.1 This document describes the security content of tvOS 10.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of watchOS 3.1

About the security content of watchOS 3.1 This document describes the security content of watchOS 3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

[oCERT-2015-008] FreeRADIUS insufficent CRL application

2015-008 FreeRADIUS insufficent CRL application Description: The FreeRADIUS server is an open source project that provides a RADIUS implementation. The FreeRADIUS server relies on OpenSSL to perform certificate validation, including Certificate Revocation List CRL checks. The FreeRADIUS usage of...

TYPO3 Maag Form Captcha开放重定向漏洞

BUGTRAQ ID: 60298 CVECAN ID: CVE-2013-4680 Typo3是开源内容管理系统（CMS）和内容管理框架（CMF）。 TYPO3的Maag Form Captcha 2.0.0及更早版本存在开放重定向漏洞，攻击者利用此漏洞可将用户重定向到任意网站并执行钓鱼攻击。 0 TYPO3 Maag Form Captcha = 2.0.0 厂商补丁： TYPO3 ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://typo3.org/extensions/repository/...

CVE-2013-4680

Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2012-4680

CVE-2012-4680 is a directory-traversal vulnerability in IOServer’s XML Server prior to version 1.0.19.0. When the Root Directory pathname lacks a trailing backslash, remote attackers can read arbitrary files or list directories via a .. in the URI. The issue affects IOServer XML Server components...

CVE-2011-4680

CVE-2011-4680 describes multiple XSS vulnerabilities in the vtiger CRM customer portal prior to version 5.2.0. The flaws allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the affected product (vtiger CRM) and the affected compon...

CentOS Update for wireshark CESA-2009:0313 centos3 i386

Check for the Version of wireshark OpenVAS Vulnerability Test CentOS Update for wireshark CESA-2009:0313 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CVE-2010-4680

The CVE-2010-4680 affects Cisco ASA 5500 series WebVPN: prior to 8.2(3), CIFS shares could be viewed even when CIFS file browsing was disabled, allowing remote authenticated users to bypass access restrictions via CIFS requests (Bug CSCsz80777). Impact is high: attackers with network access can a...

CVE-2009-4680

The concrete details show PHPDirectorySource 1.x is affected by a SQL injection in search.php via the st parameter, enabling remote execution of arbitrary SQL commands. CVE-2009-4680 is documented with exact vectors; public references (Exploit-DB, Milw0rm, SecurityFocus, Secunia) corroborate the ...

openSUSE Security Update : wireshark (wireshark-387)

This update fixes problems that could crash wireshark when processing compressed data and when processing rf5 files CVE-2008-3933, CVE-2008-3934 as well as CVE-2008-4680 USB dissector crash, CVE-2008-4681 Bluetooth RFCOMM dissector crash, CVE-2008-4682 Tamos CommView dissector crash, CVE-2008-468...

wireshark security update

CentOS Errata and Security Advisory CESA-2009:0313 Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program fo...

SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 10.3)

The remote host is missing updates announced in advisory SUSE-SR:2009:001. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

openSUSE 10 Security Update : wireshark (wireshark-5886)

This update fixes problems that could crash wireshark when processing compressed data and when processing rf5 files CVE-2008-3933, CVE-2008-3934 as well as CVE-2008-4680 USB dissector crash, CVE-2008-4681 Bluetooth RFCOMM dissector crash, CVE-2008-4683 Bluetooth ACL dissector crash, CVE-2008-4684...

openSUSE 10 Security Update : wireshark (wireshark-5783)

This update fixes problems that could crash wireshark when processing compressed data CVE-2008-3933 as well as CVE-2008-4680 USB dissector crash, CVE-2008-4681 Bluetooth RFCOMM dissector crash, CVE-2008-4683 Bluetooth ACL dissector crash, CVE-2008-4684 PRP and MATE dissector crash and CVE-2008-46...

DEBIAN-CVE-2008-4680

packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service application crash or abort via a malformed USB Request Block URB...