CVE-2013-4145

CVE-2013-4145 is a duplicate of CVE-2012-3414. Connected data shows a TYPO3 SWFUpload movieName Cross Site Scripting vulnerability (CVE-2012-3414) where an attacker can exploit the movieName parameter to perform XSS and potentially steal cookies. The OpenVAS entry confirms the XSS nature and cook...

Oracle Linux 5 : kernel (ELSA-2014-0433-1)

From Red Hat Security Advisory 2014:0433 : Updated kernel packages that fix two security issues, three bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability...

CVE-2012-4410

...

CVE-2012-4230

The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the 1 encoding directive and 2 validelements attribute, which allows attackers to conduct cross-site scripting XSS attacks via application-specific vectors, as demonstrated using a textarea element...

CVE-2012-4230

CVE-2012-4230 affects the TinyMCE 3.5.8 bbcode plugin, where the plugin does not properly enforce the security policy for two directives: (1) encoding and (2) valid_elements. This misconfiguration allows attackers to perform cross-site scripting (XSS) via application-specific vectors, demonstrate...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20140424)

A flaw was found in the way the Linux kernel's TCP/IP protocol suite implementation handled TCP packets with both the SYN and FIN flags set. A remote attacker could use this flaw to consume an excessive amount of resources on the target system, potentially resulting in a denial of service...

CVE-2012-5723

Cisco ASR 1000 devices running software before 3.8S are affected when BDI routing is enabled. The issue allows remote attackers to trigger a denial of service (device reload) by sending crafted ICMP packets (broadcast or multicast) with fragmentation. This is associated with Bug ID CSCub55948. Th...

Scientific Linux Security Update : tomcat6 on SL6.x (noarch) (20140423)

It was found that when Tomcat processed a series of HTTP requests in which at least one request contained either multiple content-length headers, or one content-length header with a chunked transfer-encoding header, Tomcat would incorrectly handle the request. A remote attacker could use this fla...

RHEL 6 : tomcat6 (RHSA-2014:0429)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0429 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. It was found that when Tomcat processed a...

Moderate: Red Hat Security Advisory: tomcat6 security update

Updated tomcat6 packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Security Vulnerability in Perl _compile

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Apr 23 17:08:11 CST 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/perladvisory4.asc...

CVE-2012-4651

CVE-2012-4651 concerns Cisco IOS prior to 15.3(2)T when ScanSafe is enabled. The vulnerability allows remote attackers to cause a denial of service (latency) by sending SYN packets that are not followed by SYN-ACKs from the Scan Safe Tower. The root cause is tied to how ScanSafe handles certain T...

CVE-2012-4658

The CVE-2012-4658 entry concerns Cisco IOS before 15.1(1)SY3, specifically the ios-authproxy component. A remote attacker can trigger denials of service (web- authentication and HTTP service outage) through vectors that cause improperly terminated HTTP sessions (Bug ID CSCtz99447). The provided d...

CVE-2012-5014

CVE-2012-5014 affects Cisco IOS before 15.1(2)SY. A remote authenticated user can cause a denial of service (device crash) by establishing an SSH session from a client and then placing that client into a slow or idle state (Bug ID CSCto87436). No exploitation details are provided in the sources. ...

CVE-2012-5427

CVE-2012-5427 affects Cisco IOS Unified Border Element (CUBE) prior to version 15.3(2)T. A remote authenticated user can cause a denial of service (input queue wedge) by sending a crafted series of RTCP packets (Bug ID CSCuc42518). The NVD record notes a CVSS v2 base score of 4.0 (Medium) with ne...

CVE-2012-1317

The CVE-2012-1317 entry affects Cisco IOS multicast handling. Affected: Cisco IOS before 15.1(1)SY. Vulnerability: multicast processing can be abused by remote attackers sending high-rate packets, causing a denial of service via Route Processor crash (Bug ID CSCts37717). There is no exploitation ...

CVE-2012-5039

CVE-2012-5039 affects the BGP Router process in Cisco IOS versions prior to 12.2(50)SY1. The vulnerability allows remote attackers to cause a denial of service via crafted BGP path attributes, leading to memory consumption on affected devices (Bug ID CSCsw63003). Exploitation details are not prov...

CVE-2012-4638

Cisco IOS before 15.1(1)SY is affected by CVE-2012-4638, where local users can trigger a denial of service (device reload) by establishing an outbound SSH session (Bug ID CSCto00318). The impact is a local-privilege-independent DoS that can reboot the device; no exploitation details are provided ...

CVE-2012-1366

CVE-2012-1366 affects Cisco IOS on ASR 1000 devices prior to 15.1(1)SY, where enabling IPv6 Multicast Listener Discovery (MLD) tracking allows remote attackers to cause a denial of service (device reload) by sending crafted MLD packets (Bug ID CSCtz28544). Connected sources confirm the vulnerabil...

CVE-2012-5037

The ACL implementation in Cisco IOS before 15.11SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service device reload via a "no object-group" command followed by an object-group command, aka Bug ID CSCts16133...