KLA10671 Flash Player update for Google Chrome

Google Chrome was updated to address vulnerabilities in Flash Player. For details look at KLA10670. Original advisories Blog entry Exploitation Public exploits exist for this vulnerability. Related products Google-Chrome CVE list CVE-2015-5573 critical CVE-2015-5574 critical CVE-2015-5575 critica...

CVE-2014-5573

The CVE concerns the Android app “The Appstros - FREE Gift Cards!” (package com.appstros.main, version 1.1.3). It states that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and capture sensitive information via a crafted certificate. The...

openSUSE Security Update : tor (openSUSE-SU-2012:1624-1)

Tear down the circuit when receiving an unexpected SENDME cell. Prevents circumvention of the network's flow control, exhaustion of network resources and possible denial-of-service attacks on entry nodes bnc791374 CVE-2012-5573, adding tor-0.2.2.39-SENDME-DOS.patch %NASLMINLEVEL 70300 C Tenable...

FreeBSD : jenkins -- multiple vulnerabilities (3e0507c6-9614-11e3-b3a5-00e0814cab4e)

Jenkins Security Advisory reports : This advisory announces multiple security vulnerabilities that were found in Jenkins core. Please reference CVE/URL list for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

[CVE-2013-5573] Jenkins v1.523 Default markup formatter permits offsite-bound forms

Advisory Information Title: Default markup formatter permits offsite-bound forms Date published : 2013-12-16 Date of last update: 2013-12-16 Vendors contacted : Jenkins CI v 1.523 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Information CVE reference: CVE-2013-5573 CVSS v2...

CVE-2013-5573

Cross-site scripting XSS vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration...

CVE-2013-5573

Cross-site scripting XSS vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration...

CVE-2013-5573

CVE-2013-5573 is an XSS in Jenkins where the default markup formatter allows remote attackers to inject arbitrary script/HTML via the Description field in user configurations. The primary public reference notes Jenkins 1.523 being affected; several connected advisories corroborate the CVE and des...

Jenkins CI 1.523 Persistent Script Insertion

Advisory Information Title: Default markup formatter permits offsite-bound forms Date published : 2013-12-16 Date of last update: 2013-12-16 Vendors contacted : Jenkins CI v 1.523 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Information CVE reference: CVE-2013-5573 CVSS v2...

Jenkins 1.523 - Persistent HTML Code

Jenkins 1.523 - Persistent HTML Code 01. Advisory Information Title: Default markup formatter permits offsite-bound forms Date published : 2013-12-16 Date of last update: 2013-12-16 Vendors contacted : Jenkins CI v 1.523 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Informatio...

Jenkins 1.523 - Persistent HTML Code

Advisory Information Title: Default markup formatter permits offsite-bound forms Date published : 2013-12-16 Date of last update: 2013-12-16 Vendors contacted : Jenkins CI v 1.523 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Information CVE reference: CVE-2013-5573 CVSS v2...

Fedora Update for tor FEDORA-2013-3434

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 18 : tor-0.2.3.25-1802.fc18 (2013-3434)

Update for security and massive revamp of spec Fix outstanding security issues, plus package cleanup torify subpackage should depend on torsocks not tsocks Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

CVE-2012-5573

The CVE-2012-5573 issue affects Tor before 0.2.3.25, where SENDME cell handling could trigger memory exhaustion or excessive cell reception, enabling DoS or flow-control bypass. Affected component: core Tor relay/OR handling. Impact per sources: potential Denial of Service on entry nodes. Remedia...

SuSE 10 Security Update : pidgin, gaim and finch (ZYPP Patch Number 5573)

specially crafted MSN SLP messages could cause an integer overflow in pidgin. Attackers could potentially exploit that to execute arbitrary code. CVE-2008-2927 - overly long file names in MSN file transfers could crash pidgin. CVE-2008-2955 - SSL certifcates were not verfied. Therefore piding...

CVE-2008-5573

Poll Pro 2.0 contains an SQL injection vulnerability in the login feature, exploitable via the Password and username parameters. The root cause is improper input handling in the login routine, allowing remote attackers to execute arbitrary SQL commands. The vulnerability’s impact is partial confi...

CVE-2008-5573

SQL injection vulnerability in the login feature in Poll Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 Password and 2 username parameters...

CVE-2007-5573

CVE-2007-5573 affects LimeSurvey versions 1.5.2 and earlier, where a PHP remote file inclusion vulnerability exists in classes/core/language.php . The rootdir parameter can be supplied via the URL to remotely execute arbitrary PHP code, representing a remote code execution via an RFI flaw. The pr...