Flash Player for Mac <= 14.0.0.145 Multiple Vulnerabilities (APSB14-18)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is equal or prior to 14.0.0.145. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists that allows code execution. CVE-2014-0538 - An unspecified security bypass...

Adobe AIR <= AIR 14.0.0.110 Multiple Vulnerabilities (APSB14-18)

According to its version, the instance of Adobe AIR on the remote Windows host is equal or prior to 14.0.0.110. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exits that allows code execution. CVE-2014-0538 - An unspecified security bypass error exists...

Flash Player <= 14.0.0.145 Multiple Vulnerabilities (APSB14-18)

According to its version, the instance of Flash Player installed on the remote Windows host is equal or prior to 14.0.0.145. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists that allows code execution. CVE-2014-0538 - An unspecified security bypass err...

USN-2308-1 openssl vulnerabilities

Adam Langley and Wan-Teh Chang discovered that OpenSSL incorrectly handled certain DTLS packets. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service. CVE-2014-3505 Adam Langley discovered that OpenSSL incorrectly handled memory when processing DTLS...

OpenSSL -- multiple vulnerabilities

The OpenSSL Project reports: A flaw in OBJobj2txt may cause pretty printing functions such as X509nameoneline, X509nameprintex et al. to leak some information from the stack. CVE-2014-3508 The issue affects OpenSSL clients and allows a malicious server to crash the client with a null pointer...

Important: Red Hat Security Advisory: kernel-rt security update

Updated kernel-rt packages that fix multiple security issues are now available for Red Hat Enterprise MRG 2.5. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

Apache Scoreboard / Status Race Condition

::: ::::::::: ::: :::::::: ::: ::::::::::::: ::: :::::::::::::::::::::::::::::::::: ::::::::: :+: :+: :+: :+: :+: :+: :+: :+::+: :+::+: :+: :+: :+: :+: :+: :+::+: :+: +:+ +:+ +:+ +:++:+ +:+ +:+ +:+ +:++:+ +:+ +:+ +:+ +:+ +:+ +:++:+ +:+ +++:++++:+++:++++++:++++:++ +++:+++++++:++ +++:++++ ++ ++...

Uzbey: Missing "size check" on files to upload could make memory leaks.

I noticed that there isn't any "size check" when someone tries to upload a flie through the "upload picture" option, this could generate a memory leak or also a kind of DoS and is deangerous with bigger and bigger files. So i first tried to upload a file of about 2,52 GB see the pic and no warnin...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix three security issues are now available for Red Hat Enterprise Linux 6.2 Extended Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detaile...

Important: Red Hat Security Advisory: mod_wsgi security update

An updated modwsgi package that fixes two security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS Update for kernel CESA-2014:0771 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : icinga nagios-rpm-macros (openSUSE-SU-2012:1123-1)

This update fixes the following issues for icinga and nagios-rpm-macros: icinga : - reverted icinga home directory change - added missing dependency to the new recurring downtimes plugin - added a new package which provides the recurring downtimes scripts from contrib...

openSUSE Security Update : kernel (openSUSE-SU-2010:0634-1)

The openSUSE 11.3 kernel was updated to versiuon 2.6.34.7. It fixes lots of bugs and security issues. A major regression in handling some USB Input devices Mice and Keyboard introduced by the previous update was fixed. Fixed lots of bugs in the ATH5K wireless driver. Following security issues wer...

openSUSE Security Update : samba (openSUSE-2012-109)

" - Fix memory leak in parent smbd on connection; CVE-2012-0817; bso8724 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-109. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : tor (openSUSE-SU-2014:0719-1) (Heartbleed)

tor 0.2.4.22 bnc878486 Tor was updated to the recommended version of the 0.2.4.x series. - major features in 0.2.4.x : - improved client resilience - support better link encryption with forward secrecy - new NTor circuit handshake - change relay queue for circuit create requests from size-based...

openSUSE Security Update : rsyslog (openSUSE-SU-2011:0326-1)

rsyslog was updated to version 5.6.5 to fix a number of memory leaks that could crash the syslog daemon CVE-2011-1488, CVE-2011-1489, CVE-2011-1490. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

Fedora 20 : mingw-gnutls-3.1.25-1.fc20 (2014-6953)

Version 3.1.25 released 2014-05-30 - libgnutls: Eliminated memory corruption issue in Server Hello parsing. Issue reported by Joonas Kuorilehto of Codenomicon. - libgnutls: Increased the maximum certificate size buffer in the PKCS 11 subsystem. - libgnutls: Check the return code of getpwuidr...

RedHat Update for curl RHSA-2014:0561-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for kernel RHSA-2013:1051-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : php-5.5.12-1.fc19 (2014-5984)

Notice: to fix CVE-2014-0185 this version change default php-fpm unix domain socket permission to 660 instead of 666. Check your configuration if php-fpm use UDS default configuration use a network socket. Upstream Changelog: 01 May 2014, PHP 5.5.12 Core : - Fixed bug 61019 Out of memory on comma...