FreeBSD : PHP5 -- memory corruption in openssl_x509_parse() (47b4e713-6513-11e3-868f-0025905a4771)

Stefan Esser reports : The PHP function opensslx509parse uses a helper function called asn1timetotimet to convert timestamps from ASN1 string format into integer timestamp values. The parser within this helper function is not binary safe and can therefore be tricked to write up to five NUL bytes...

SeaMonkey < 2.23 Multiple Vulnerabilities

Binary data 8072.prm...

Mozilla Thunderbird < 24.2 Multiple Vulnerabilities

Binary data 8071.prm...

ca-certificates-mozilla: add, remove or blacklist some certificates (important)

The Mozilla CA certificates package was updated to match the current Mozilla revision 1.95 of certdata.txt. It blacklists some misused certificate authorities, adds some new and adjusts some others. On openSUSE 13.1 a problem with names was also fixed. distrust: AC DG Tresor SSL bnc854367 new:...

PHP5 -- memory corruption in openssl_x509_parse()

Stefan Esser reports: The PHP function opensslx509parse uses a helper function called asn1timetotimet to convert timestamps from ASN1 string format into integer timestamp values. The parser within this helper function is not binary safe and can therefore be tricked to write up to five NUL bytes...

Design/Logic Flaw

The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive information by reading data elements, as demonstrated by password elements...

CVE-2013-6986

The CVE-2013-6986 issue affects ZippyYum Subway CA Kiosk iOS app (3.4). The vulnerability stems from cleartext storage of sensitive data in SQLite cache files (Cache.db / Cache.db-wal) under ../Caches/com.ZippyYum.SubwayOC/, allowing local attackers with access to read unencrypted data. Exposed e...

PT-2013-6221

Name of the Vulnerable Software and Affected Versions ZippyYum Subway CA Kiosk app version 3.4 Description The issue concerns the use of cleartext storage in SQLite cache databases. This allows attackers to obtain sensitive information by reading data elements, such as password elements...

CVE-2013-6986: Undefined Security Weakness

The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive information by reading data elements, as demonstrated by password elements...

Microsoft Digital Certificates Security Advisory (2916652)

This host is missing an important security update according to Microsoft advisory 2916652. OpenVAS Vulnerability Test $Id: gbmicrosoftsecurityadvisory2916652.nasl 5347 2017-02-19 09:15:55Z cfi $ Microsoft Digital Certificates Security Advisory 2916652 Authors: Shashi Kiran N Copyright: Copyright ...

Microsoft Digital Certificates Security Advisory (2916652)

This host is missing an important security update according to Microsoft advisory 2916652. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-5968

Cross-site scripting XSS vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " double quote character...

Cross site scripting

Cross-site scripting XSS vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " double quote character...

CVE-2013-5968

Cross-site scripting XSS vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " double quote character...

CVE-2013-5968

CVE-2013-5968 is a cross-site scripting (XSS) vulnerability affecting CA SiteMinder 12.0–12.51 and SiteMinder 6 Web Agents. The issue allows remote attackers to inject arbitrary script or HTML via vectors involving the double-quote character. The NVD entry lists a Medium severity (CVSSv2 base sco...

PT-2013-5892

Name of the Vulnerable Software and Affected Versions CA SiteMinder versions 12.0 through 12.51 CA SiteMinder 6 Web Agents affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors involving a character...

CVE-2013-5968: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " double quote character...

CA20131024-01: Security Notice for CA SiteMinder

-----BEGIN PGP SIGNED MESSAGE----- CA20131024-01: Security Notice for CA SiteMinder Issued: October 24, 2013 CA Technologies Support is alerting customers to a potential vulnerability in CA SiteMinder that can be mitigated by utilizing existing product functionality. The vulnerability,...

CA SiteMinder crossite scripting

No description provided...

Mandriva Linux Security Advisory : nss (MDVSA-2013:257)

A vulnerability has been discovered and corrected in mozilla NSS : Mozilla Network Security Services NSS before 3.15.2 does not ensure that data structures are initialized before read operations, which allow remote attackers to cause a denial of service or possibly have unspecified other impact v...