121 matches found
member.8090.com XSS vulnerability
Open Bug Bounty ID: OBB-648612 Description| Value ---|--- Affected Website:| member.8090.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
The vulnerability in the Vivint Sky Control Panel web application lies in the lack of authentication for critical functions. This allows a malicious individual to activate or deactivate the security system and alter other security settings.
The vulnerability of the Vivint Sky Control Panel web application is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to enable and disable the alarm system and modify other security settings via the web interface the default por...
CVE-2016-8090
This CVE entry is rejected and not associated with an active vulnerability.
Oracle: Security Advisory (ELSA-2014-1913)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-8090
The CVE-2015-8090 issue affects the Web Server component of TIBCO LogLogic Unity prior to 1.1.1. Affected: Web Server in Unity; Root cause is not explicitly stated, but the vulnerability allows an authenticated remote user to gain privileges and, consequently, access sensitive information via an ...
Oracle: Security Advisory (ELSA-2014-1912)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-200-1 : ruby1.9.1 security update
CVE-2014-4975 The encodes function in pack.c had an off-by-one error that could lead to a stack-based buffer overflow. This could allow remote attackers to cause a denial of service crash or arbitrary code execution. CVE-2014-8080, CVE-2014-8090 The REXML parser could be coerced into allocating...
[SECURITY] [DLA 200-1] ruby1.9.1 security update
Package : ruby1.9.1 Version : 1.9.2.0-2+deb6u3 CVE ID : CVE-2014-4975 CVE-2014-8080 CVE-2014-8090 CVE-2014-4975 The encodes function in pack.c had an off-by-one error that could lead to a stack-based buffer overflow. This could allow remote attackers to cause a denial of service crash or arbitrar...
DLA-200-1 ruby1.9.1 - security update
Bulletin has no description...
Mandriva Linux Security Advisory : ruby (MDVSA-2015:129)
Updated ruby packages fix security vulnerabilities : Due to unrestricted entity expansion, when reading text nodes from an XML document, the REXML parser in Ruby can be coerced into allocating extremely large string objects which can consume all of the memory on a machine, causing a denial of...
Debian DLA-88-1 : ruby1.8 security update
This update fixes multiple local and remote denial of service and remote code execute problems : CVE-2011-0188 Properly allocate memory, to prevent arbitrary code execution or application crash. Reported by Drew Yao. CVE-2011-2686 Reinitialize the random seed when forking to prevent CVE-2003-0900...
[SECURITY] [DSA 3159-1] ruby1.8 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3159-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini February 10, 2015 http://www.debian.org/security/faq -...
Debian DSA-3157-1 : ruby1.9.1 - security update
Multiple vulnerabilities were discovered in the interpreter for the Ruby language : - CVE-2014-4975 The encodes function in pack.c had an off-by-one error that could lead to a stack-based buffer overflow. This could allow remote attackers to cause a denial of service crash or arbitrary code...
Debian Security Advisory DSA 3157-1 (ruby1.9.1 - security update)
Multiple vulnerabilities were discovered in the interpreter for the Ruby language: CVE-2014-4975 The encodes function in pack.c had an off-by-one error that could lead to a stack-based buffer overflow. This could allow remote attackers to cause a denial of service crash or arbitrary code executio...
DSA-3157-1 ruby1.9.1 - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3157-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 11.3 Security Update : Ruby (SAT Patch Number 10126)
The Ruby script interpreter has been updated to fix two denial of service attacks when expanding XML. CVE-2014-8080 / CVE-2014-8090 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...
openSUSE Security Update : ruby20 (openSUSE-SU-2015:0002-1)
This ruby update fixes the following two security issues : - bnc902851: fix CVE-2014-8080: Denial Of Service XML Expansion - bnc905326: fix CVE-2014-8090: Another Denial Of Service XML Expansion - Enable tests to run during the build. This way we can compare the results on different builds...
openSUSE Security Update : ruby2.1 (openSUSE-SU-2015:0007-1)
The following issues were fixed in this update : - CVE-2014-8090: Denial Of Service XML Expansion bnc905326 - CVE-2014-8080: Denial Of Service XML Expansion bnc902851 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...