20292 matches found
CVE-2012-6581
Best Practical Solutions RT: Affected versions are RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8 with GnuPG enabled. The vulnerability lets remote attackers bypass restrictions on reading keys in the keyring and trigger outbound e‑mail messages signed by an arbitrary stored secret key by abusing ...
CVE-2012-6580
CVE-2012-6580 affects Best Practical Solutions RT: RT 3.8.x before 3.8.15 and RT 4.0.x before 4.0.8, with GnuPG enabled. The issue is that the UI may not label unencrypted messages as unencrypted, which could allow remote attackers to spoof a message’s origin or interfere with encryption-policy a...
HP System Management Homepage < 7.2.1.0 Multiple Vulnerabilities (BEAST)
According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is a version prior to 7.2.1.0. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability, known as BEAST, exists in the SSL 3.0 and...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-5217. Reason: This candidate is a duplicate of CVE-2012-5217. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2012-5217 instead of this candidate. All references and descriptions in this...
Request Tracker 3.8.x < 3.8.17 / 4.x < 4.0.13 Multiple Vulnerabilities
According to its self-reported version number, the Best Practical Solutions Request Tracker RT running on the remote web server is version 3.8.x prior to 3.8.17 or version 4.x prior to 4.0.13. It is, therefore, potentially affected by the following vulnerabilities : - A flaw exists that allows a...
Ektron XSLT Transform Remote Code Execution (CVE-2012-5357)
A remote code execution vulnerability has been reported in Ektron CMS in XslCompiledTransform class...
CVE-2012-5217
HP System Management Homepage (SMH) vulnerability CVE-2012-5217 affects SMH versions prior to 7.2.1. It allows remote attackers to bypass access restrictions and obtain sensitive information via unspecified vectors. This is separate from CVE-2013-2355. HP’s Security Bulletin notes the remediation...
CVE-2012-3414
Cross-site scripting XSS vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the...
CVE-2012-3414
CVE-2012-3414 describes a cross-site scripting (XSS) vulnerability in the SWFUpload component (movieName parameter) used by SWFUpload 2.2.0.1 and earlier, and deployed in products such as WordPress ≤ 3.3.1/3.3.2 and TinyMCE Image Manager 1.1. The underlying cause is unsafe handling via ExternalIn...
[security bulletin] HPSBMU02900 rev.2 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03839862 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03839862 Version: 2 HPSBMU02900 rev....
Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2013-2537)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2537 advisory. - Bluetooth: RFCOMM - Fix missing msgnamelen update in rfcommsockrecvmsg Mathias Krause Orabug: 17173824 CVE-2013-3225 - Bluetooth: fix possible in...
[SECURITY] [DSA 2725-1] tomcat6 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2725-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 18, 2013 http://www.debian.org/security/faq -...
CVE-2012-6349
CVE-2012-6349 describes a buffer overflow in the Autonomy KeyView IDOL .mdb parser, used in IBM Notes 8.5.x before 8.5.3 FP4 . A crafted file can trigger the overflow, enabling remote code execution. The vulnerability is tied to the KeyView IDOL integration (via the .mdb parser) and is consistent...
Debian Security Advisory DSA 2725-1 (tomcat6 - several vulnerabilities)
Two security issues have been found in the Tomcat servlet and JSP engine: CVE-2012-3544 The input filter for chunked transfer encodings could trigger high resource consumption through malformed CRLF sequences, resulting in denial of service. CVE-2013-2067 The FormAuthenticator module was vulnerab...
unbreakable enterprise kernel security update
kernel-uek 2.6.32-400.29.2uek - Bluetooth: RFCOMM - Fix missing msgnamelen update in rfcommsockrecvmsg Mathias Krause Orabug: 17173824 CVE-2013-3225 - Bluetooth: fix possible info leak in btsockrecvmsg Mathias Krause Orabug: 17173824 CVE-2013-3224 - atm: update msgnamelen in vccrecvmsg Mathias...
SuSE 11.3 Security Update : gpg2 (SAT Patch Number 7919)
This update for gpg2 provides the following fixes : - 780943: Set proper file permissions when en/de-crypting files. - 798465: Fix an issue that could cause corruption of the public keys database. CVE-2012-6085 - 808958: Select proper ciphers when running in FIPS mode. %NASLMINLEVEL 70300 C Tenab...
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt9
July 17, 2013 Led 2.6.32-alt9 - 2.6.32-358.14.1.el6: + CVE-2012-6548 + CVE-2013-0914 + CVE-2013-1848 + CVE-2013-2128 + CVE-2013-2634 + CVE-2013-2635 + CVE-2013-2852 + CVE-2013-3222 + CVE-2013-3224 + CVE-2013-3225 + CVE-2013-3301 - added radeon firmwares...
Debian: Security Advisory (DSA-2725-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Thunderbird ESR Multiple Vulnerabilities - August12 (Mac OS X)
This host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdesrmultvulnaug12macosx.nasl 6115 2017-05-12 09:03:25Z teissa $ Mozilla Thunderbird ESR Multiple Vulnerabilities - August12 Mac OS X Authors: Arun Kalla...