Security fix for the ALT Linux 9 package glibc version 6:2.17-alt6

Jan. 11, 2014 Dmitry V. Levin 6:2.17-alt6 - Backported upstream fixes for sw bugs: 14547, 14699, 15003, 15014, 15073, 15122, 15160, 15234, 15330, 15465, 15736, 15754, 15759, 15855, 15856, 15857, 15917, 16038, 16072 including fixes for CVE-2012-4412, CVE-2012-4424, CVE-2013-4237, CVE-2013-4332,...

Fedora Update for net-snmp FEDORA-2013-22919

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CSRF, XSS and Redirector vulnerabilities in IBM Lotus Notes Traveler

Hello 3APA3A! These are Cross-Site Request Forgery, Cross-Site Scripting and Redirector vulnerabilities in IBM Lotus Notes Traveler. They are similar to CSRF, XSS and Redirector vulnerabilities in IBM Lotus Domino http://securityvulns.ru/docs29060.html, which I announced at 19.05.2012 and disclos...

Fedora 20 : net-snmp-5.7.2-16.fc20 (2013-22809)

This update fixes CVE-2012-6151 : - snmpd crashes/hangs when AgentX subagent times-out Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

Fedora 19 : net-snmp-5.7.2-13.fc19 (2013-22919)

This update fixes CVE-2012-6151 : - snmpd crashes/hangs when AgentX subagent times-out Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

Fedora 18 : net-snmp-5.7.2-7.fc18 (2013-22949)

This update fixes CVE-2012-6151 : - snmpd crashes/hangs when AgentX subagent times-out Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

ESA-2013-094: EMC Data Protection Advisor JBOSS Remote Code Execution Vulnerability

ESA-2013-094.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-094: EMC Data Protection Advisor JBOSS Remote Code Execution Vulnerability EMC Identifier: ESA-2013-094 CVE Identifier: CVE-2012-0874 Severity Rating: CVSS v2 Base Score: 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C Affected products: • A...

Symantec Web Gateway ldap_latest.php Blind SQL Injection - Ver2 (CVE-2012-2961)

An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Internet Explorer Null Byte Information Disclosure (MS12-010) - Ver2 (CVE-2012-0012)

An information disclosure vulnerability has been reported in Internet Explorer. The vulnerability occurs during certain processes, in which Internet Explorer incorrectly allows attackers to view content from the process memory. A remote attacker may exploit this issue by enticing target users to...

GLSA-201401-04 : Python: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201401-04 Python: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Python. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly cause a Denial of Servic...

Apache Solr < 4.1.0 Multiple XML External Entity Injections

The version of Apache Solr running on the remote web server is affected by multiple XML external entity injection vulnerabilities because the XML parser accepts XML data containing external entity declarations from untrusted sources. A remote, unauthenticated attacker can exploit this flaw to gai...

CVE-2012-2898

Google Chrome before 21.0.1180.82 on iOS on iPad devices allows remote attackers to spoof the Omnibox URL via vectors involving SSL error messages, a related issue to CVE-2012-0674...

Sql injection

Google Chrome before 21.0.1180.82 on iOS on iPad devices allows remote attackers to spoof the Omnibox URL via vectors involving SSL error messages, a related issue to CVE-2012-0674...

CVE-2012-2899

Summary: CVE-2012-2899 affects Google Chrome on iOS prior to 21.0.1180.82. The issue arises from incorrect calls to WebView methods that enable an applewebdata: URL, bypassing the Same Origin Policy and enabling Universal XSS (UXSS) via document.write. Impact: SOP bypass and UXSS risk on affected...

CVE-2012-2898

CVE-2012-2898 affects Google Chrome for iOS prior to 21.0.1180.82 on iPad devices. The vulnerability enables remote attackers to spoof the Omnibox URL by exploiting SSL error message handling, a URL-bar spoofing issue related to CVE-2012-0674. The Chrome update 21.0.1180.82 (Chrome for iOS) addre...

DSquare Exploit Pack: D2SEC_OP5

Name| d2secop5 ---|--- CVE| CVE-2012-0261 Exploit Pack| D2ExploitPack Description| OP5 Monitor Remote Code Execution Vulnerability Notes|...

CVE-2012-0263

Affected products: op5 Monitor and op5 Appliance (before 5.5.1). Vulnerability description (as stated): remote authenticated users can obtain sensitive information (e.g., database and user credentials) via error messages triggered by (1) a malformed hoststatustypes parameter to status/service/all...

CVE-2012-0262

CVE-2012-0262 affects OP5 Monitor and OP5 Appliance prior to version 5.5.3. The vulnerability arises on the welcome page (op5config/welcome) where remote, unauthenticated attackers can cause arbitrary command execution by submitting shell metacharacters in the password parameter. Impact is remote...

CVE-2012-0261

CVE-2012-0261 affects OP5 Monitor and OP5 Appliance: the license.php script in system-portal is vulnerable to remote command execution through shell metacharacters in the timestamp parameter of an install action. The validated root cause is improper input validation in license.php, leading to arb...

CVE-2012-0261

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action...