4134 matches found
I2P - The Invisible Internet Project
I2P is an anonymous network, exposing a simple layer that applications can use to anonymously and securely send messages to each other. The network itself is strictly message based a la IP, but there is a library available to allow reliable streaming communication on top of it a la TCP. All...
[SECURITY] [DLA 237-1] mercurial security update
Package : mercurial Version : 1.6.4-1+deb6u1 CVE ID : CVE-2014-9390 CVE-2014-9462 CVE-2014-9462 Jesse Hertz of Matasano Security discovered that Mercurial, a distributed version control system, is prone to a command injection vulnerability via a crafted repository name in a clone command...
Multiple IBM Product Denial of Service Vulnerabilities (CNVD-2015-03496)
IBM manufactures and sells computer hardware and software, and provides consulting services for systems architecture and web hosting. Common Inventory Technology CIT versions prior to 2.7.0.2050 are used in IBM License Metric Tool versions 7.2.2, 7.5 and 9, Endpoint Manger for Software Use Analys...
Multiple IBM Product Denial of Service Vulnerabilities (CNVD-2015-03487)
IBM manufactures and sells computer hardware and software, and provides consulting services for systems architecture and web hosting. Common Inventory Technology CIT versions prior to 2.7.0.2050 are used in IBM License Metric Tool versions 7.2.2, 7.5 and 9, Endpoint Manger for Software Use Analys...
[SECURITY] Fedora 22 Update: quassel-0.11.0-2.fc22
Quassel IRC is a modern, distributed IRC client, meaning that one or multiple clients can attach to and detach from a central core -- much like the popular combination of screen and a text-based IRC client such as WeeChat, but graphical...
PT-2015-4130
Name of the Vulnerable Software and Affected Versions IBM License Metric Tool versions prior to 2.7.0.2050 Endpoint Manger for Software Use Analysis version 9 Tivoli Asset Discovery for Distributed versions 7.2.2 and 7.5 Description The issue allows remote attackers to cause a denial of service,...
PT-2015-4131
Name of the Vulnerable Software and Affected Versions IBM License Metric Tool versions 7.2.2 through 9 before 2.7.0.2050 Endpoint Manger for Software Use Analysis version 9 Tivoli Asset Discovery for Distributed versions 7.2.2 through 7.5 Description The issue allows remote attackers to cause a...
CVE-2014-8927: Undefined Security Weakness
Common Inventory Technology CIT before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service CPU consumption or application crash via a...
CVE-2014-8926: Undefined Security Weakness
Common Inventory Technology CIT before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service CPU consumption or application crash via a...
PT-2015-4128
Name of the Vulnerable Software and Affected Versions IBM License Metric Tool versions 7.2.2 before IF15 and 7.5 before IF24 Tivoli Asset Discovery for Distributed versions 7.2.2 before IF15 and 7.5 before IF24 Description The issue allows remote attackers to read arbitrary files or send TCP...
CVE-2014-8924: Undefined Security Weakness
The server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7.5 before IF24 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity...
[SECURITY] [DSA 3258-1] quassel security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3258-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 12, 2015 http://www.debian.org/security/faq -...
Debian DSA-3257-1 : mercurial - security update
Jesse Hertz of Matasano Security discovered that Mercurial, a distributed version control system, is prone to a command injection vulnerability via a crafted repository name in a clone command. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Debian Security Advisory DSA 3258-1 (quassel - security update)
It was discovered that the fix for CVE-2013-4422 in quassel, a distributed IRC client, was incomplete. This could allow remote attackers to inject SQL queries after a database reconnection e.g. when the backend PostgreSQL server is restarted. OpenVAS Vulnerability Test $Id: deb3258.nasl 6609...
Debian Security Advisory DSA 3241-1 (elasticsearch - security update)
John Heasman discovered that the site plugin handling of the Elasticsearch search engine was susceptible to directory traversal. OpenVAS Vulnerability Test $Id: deb3241.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3241-1 using nvtgen 1.0 Script version: 1.0 Author:...
openSUSE Compromise Protected Information
The drbd-kmp-trace package of the OpenSUSE operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
UBUNTU-CVE-2015-0405
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA...
[SECURITY] Fedora 20 Update: nodejs-0.10.36-3.fc20
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...
[SECURITY] Fedora 21 Update: nodejs-0.10.36-3.fc21
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...