20292 matches found
openSUSE Security Update : RubyOnRails (openSUSE-SU-2013:0338-1)
The Ruby on Rails 2.3 stack was updated to 2.3.17. The Ruby on Rails 3.2 stack was updated to 3.2.12. The Ruby Rack was updated to 1.1.6. The Ruby Rack was updated to 1.2.8. The Ruby Rack was updated to 1.3.10. The Ruby Rack was updated to 1.4.5. The updates fix various security issues and bugs. ...
openSUSE Security Update : fail2ban (openSUSE-SU-2013:0566-1)
This update of fail2ban fixes a startup related startup-problem and a security problem fixed upstream CVE-2012-5642. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-267. The text...
openSUSE Security Update : roundcubemail (openSUSE-SU-2012:1124-1)
Update to version 0.8.1 - lot of bugfixes and new features including new skin please check the CHANGELOG - contains security related fixes bnc777446 - Fix XSS vulnerability in message subject handling using Larry skin CVE-2012-3507 - Fix XSS issue where plain signatures wasn't secured in HTML...
openSUSE Security Update : apache2-mod_security2 (openSUSE-SU-2013:1331-1)
complete overhaul of this package, with update to 2.7.5. - ruleset update to 2.2.8-0-g0f07cbb. - new configuration framework private to modsecurity2: /etc/apache2/conf.d/modsecurity2.conf loads /usr/share/apache2-modsecurity2/rules/modsecuritycrs1 0setup.conf, then...
openSUSE Security Update : tor (openSUSE-SU-2012:1624-1)
Tear down the circuit when receiving an unexpected SENDME cell. Prevents circumvention of the network's flow control, exhaustion of network resources and possible denial-of-service attacks on entry nodes bnc791374 CVE-2012-5573, adding tor-0.2.2.39-SENDME-DOS.patch %NASLMINLEVEL 70300 C Tenable...
openSUSE Security Update : freetype2 (openSUSE-SU-2013:0165-1)
BNC795826, CVE-2012-5668.patch bdf Fix Savannah bug 37905. - src/bdf/bdflib.c bdfparsestart: Reset propssize' to zero in case of allocation error; this value gets used in a loop in - BNC795826, CVE-2012-5669.patch bdf Fix Savannah bug 37906. - src/bdf/bdflib.c bdfparseglyphs: Use correct array...
openSUSE Security Update : pdns (openSUSE-SU-2012:0200-1)
This update of PowerDNS fixes a Denial of Service flaw which could be exploited by remote attackers via specially crafted DNS queries CVE-2012-0206. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...
CVE-2012-5583
CVE-2012-5583 affects the phpCAS library before 1.3.2. The issue is that the client does not verify that the server hostname matches a domain name in the X.509 certificate (CN or SAN), enabling MITM–style spoofing with arbitrary valid certificates. Affected software: phpCAS prior to 1.3.2. Impact...
CVE-2012-5390
The CVE-2012-5390 entry concerns the Condor project: the standard universe shadow component (condor_shadow.std) in Condor versions 7.7.3–7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does not properly check privileges, enabling remote attackers to gain elevated privileges via a crafted standard universe j...
CVE-2012-4728
The CVE-2012-4728 entry is supported by connected sources: Corel Quattro Pro X6 Standard Edition (16.0.0.388 and earlier) is affected by two NULL pointer dereferences in QPW160.dll (QProGetNotebookWindowHandle and Ordinal132) triggered by a crafted QPW file, causing remote denial of service via a...
CVE-2012-6142
Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...
CVE-2012-6142
Affected software: HTML::EP module 0.2011 for Perl. The vulnerability is due to the module not properly using Storable::thaw during deserialization, allowing remote attackers to execute arbitrary code via a crafted request. Impact is arbitrary code execution with the described deserialization fla...
CVE-2012-6141
The CVE-2012-6141 issue affects the Perl App::Context module (versions 0.01–0.968). Root cause: improper handling of Storable::thaw during deserialization. Impact: remote attackers can execute arbitrary code via crafted requests to App::Session::Cookie or App::Session::HTMLHidden, as described in...
CVE-2012-6143
CVE-2012-6143 affects Spoon::Cookie in the Spoon module (Perl) version 0.24. It arises because Storable::thaw is not used safely, enabling remote attackers to execute arbitrary code via a crafted deserialization request. The vulnerability is rated high (CVSSv2 base score 7.5) with network attack ...
CVE-2012-5057
CVE-2012-5057 describes a CRLF injection vulnerability in ownCloud Server
CVE-2012-5336
The CVE-2012-5336 issue affects ownCloud Server versions prior to 4.0.8. The root cause is improper validation of the user_id session variable in lib/base.php, which allows remote authenticated users to read arbitrary files via WebDAV. Affected software: ownCloud Server
CVE-2012-5056
OwnCloud Server prior to 4.0.8 is affected by multiple XSS vulnerabilities. The issues allow remote attackers to inject arbitrary script/HTML via three vectors: (1) readyCallback in apps/files_odfviewer/src/webodf/webodf/flashput/PUT.swf, (2) root parameter to apps/gallery/templates/index.php, an...
Oracle Linux 6 : libtasn1 (ELSA-2014-0596)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0596 advisory. 2.3-6 - added check for null pointer 1102336 2.3-5 - fix various DER decoding issues 1102336 2.3-4 - fix CVE-2012-1569 - missing length check when...
Debian Security Advisory DSA 2947-1 (libav - security update)
Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v0.8.12 OpenVAS Vulnerability Test $Id: deb2947.nasl 8972 2018-02-28 07:02:10...
