CVE-2013-4779

Cross-site scripting XSS vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to obtain sensitive server and statistics information via unspecified vectors...

CVE-2013-4778

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to obtain sensitive server and statistics information via unspecified vectors...

CVE-2013-4781

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2013-4781

Affected products: Siemens OpenScape Branch appliance and OpenScape Session Border Controller (SBC). Vulnerable component: core/getLog.php. Vulnerability: remote attackers can execute arbitrary commands via unspecified vectors. Affected versions: OpenScape Branch before 2 R0.32.0 and OpenScape SB...

CVE-2013-4780

CVE-2013-4780 affects Siemens OpenScape Branch and OpenScape SBC (before 2 R0.32.0 and before 7 R1.7.0). The vulnerability allows remote attackers to read arbitrary files via unspecified vectors. Affected components are core/getLog.php on the Siemens OpenScape appliances; no explicit exploit deta...

CVE-2013-4779

The CVE-2013-4779 entry documents a Cross-site Scripting (XSS) vulnerability in the file core/handleTw.php for Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC). Affected versions are OpenScape Branch before 2 R0.32.0 and SBC before 7 R1.7.0 (and 7 before...

CVE-2013-4778

CVE-2013-4778 affects Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before specific version updates (OpenScape Branch before 2 R0.32.0 and SBC before 7 R1.7.0). The vulnerability is exposed via core/getLog.php, allowing remote attackers to obtain sens...

Oracle Linux 5 / 6 : dbus (ELSA-2011-1132)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1132 advisory. - Merge changes from RHEL-6 branch: Drop default patch fuzz Merge CVE-2010-4352.patch from RHEL-60-Z - Apply patches for CVE-2011-2200 Tenable has extracted...

Debian: Security Advisory (DSA-2720-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/mozilla-firefox-17.0.7esr-i486-1slack14.0.txz: Upgraded. This release contains security fixes and improvements. For...

Stack overflow

Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...

Design/Logic Flaw

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...

CVE-2012-6571

The CVE-2012-6571 issue affects Huawei devices (AR routers and S-series switches: S2000, S3000, S3500, S3900, S5100, S5600, S7800). The HTTP module in the BIMS/web management components uses predictable Session ID values, enabling remote attackers to hijack sessions via brute-force. This is docum...

Siemens OpenScape Branch / Session Border Controller XSS / Disclosure / Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities in Siemens OpenScape Branch and OpenScape Session Border Controller product: Siemens OpenScape Branch Siemens OpenScape Session Border Controller...

Debian DSA-2699-1 : iceweasel - several vulnerabilities

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, missing input sanitising vulnerabilities, use-after-free vulnerabilities, buffer overflows and other programming errors may lead to the execution of arbitrary...

Server: Privilege escalation in the contacts application

Due to not properly checking the ownership of a single contact, an authenticated attacker is able to download contacts of other users in all ownCloud versions prior to 5.0.5 including the 4.5.x branch. Note: Successful exploitation of this privilege escalation requires the "contacts" app to be...

Mozilla Thunderbird 10.x < 10.0.12 Multiple Vulnerabilities

The installed version of Thunderbird 10.x is potentially affected by the following security issues : - Two intermediate certificates were improperly issued by TURKTRUST certificate authority. CVE-2013-0743 - A use-after-free error exists related to displaying HTML tables with many columns and...

FreeBSD-SA-12:06.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-12:06.bind Security Advisory The FreeBSD Project Topic: Multiple Denial of Service vulnerabilities with named8 Category: contrib Module: bind Announced: 2012-11-2...