13672 matches found
SUSE SLED12 / SLES12 Security Update : dracut (SUSE-SU-2015:2065-1)
The dracut package was updated to fix the following security and non-security issues : - CVE-2015-0794: Use mktemp instead of hard-coded filenames, possible vulnerability bsc935338. - Always install mdraid modules bsc935993. - Add notice when dracut failed to install modules bsc952491. - Always...
SUSE SLED11 / SLES11 Security Update : ntp (SUSE-SU-2015:2058-1)
This ntp update provides the following security and non security fixes : - Update to 4.2.8p4 to fix several security issues bsc951608 : - CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK - CVE-2015-7855: decodenetnum will ASSERT botch instead of returni...
SUSE SLED11 / SLES11 Security Update : xscreensaver (SUSE-SU-2015:2054-1)
The xscreensaver package was updated to fix the following security and non security issues : - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062. - Added xscreensaver-insignalhandlerp.patch needed for fix of signal handling. - Refresh xscreensaver-stars.patch. Note th...
天融信网络卫士安全审计系统未授权下载日志
No description provided by source...
The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of Mozilla Network Security Services for Firefox and Firefox ESR browsers is caused by a buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code using specially crafted OCTET STRING data...
Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code or trigger service denial-of-service attacks
The vulnerability of the PLARENAALLOCATE implementation in Mozilla Network Security Services for Firefox and Firefox ESR browsers is related to a buffer overflow caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...
Debian DLA-344-1 : nspr security update
Google security engineer Ryan Sleevi found a vulnerability in the NetScape Portable Runtime Library NSPR. NSPR allocated memory without specific checks, making it possible for remote attackers to cause a Denial of Service or execute arbitrary code. For Debian 6 'Squeeze', this issue have been fix...
Moderate: Red Hat Security Advisory: chrony security, bug fix, and enhancement update
Updated chrony packages that fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...
Inside the Conficker-Infected Police Body Cameras
Rarely does one story run such a gamut of security threats, encapsulating in this case, Internet of Things risks, supply chain infiltration and some circa-2008 malware for good measure. But that’s what we have with this week’s saga of the body cameras, marketed for police use, that were shipped...
nss: use-after-poison in sec_asn1d_parse_leaf() (MFSA 2015-133)
A use-after-poison flaw was found in the way NSS parsed certain ASN.1 structures. An attacker could use this flaw to cause NSS to crash or execute arbitrary code with the permissions of the user running an application compiled against the NSS library...
Ubuntu 15.04 / 15.10 : lxcfs vulnerabilities (USN-2813-1)
It was discovered that LXCFS incorrectly enforced directory escapes. A local attacker could use this issue to possibly escalate privileges. CVE-2015-1342 It was discovered that LXCFS incorrectly checked certain permissions. A local attacker could use this issue t possibly escalate privileges...
SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2015:2000-1)
The libsndfile package was updated to fix the following security issue : - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service DoS bsc953521. - CVE-2015-7805: Fixed heap overflow issue bsc953516. - CVE-2015-8075: Fixed heap overflow issue bsc953519. Note that Tenabl...
D-Link DIR-825 Buffer Overflow / Directory Traversal
Advisory Information Title: DIR-825 vC Buffer overflows in authentication,HNAP and ping functionalities. Also a directory traversal issue exists which can be exploited Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been...
GE Hydran M2 Predictable TCP Initial Sequence Vulnerability
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on February 10, 2015, and is being released to the NCCIC/ICS-CERT web site. Raheem Beyah, David Formby, and San Shin Jung of Georgia Tech, via a research project partially sponsored by the Georgia Tech National...
CVE-2015-6366
CVE-2015-6366 affects Cisco IOS (versions 15.2(04)M6 and 15.4(03)S). The root cause is that physical-interface ACLs can supersede tunnel-interface ACLs, allowing an unauthenticated, remote user connected to a tunnel to bypass traffic restrictions. Impact is described as bypassing intended network...
SUSE SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2015:1978-1)
This Mozilla Firefox, NSS and NSPR update fixes the following security and non security issues. - mozilla-nspr was updated to version 4.10.10 bsc952810 - MFSA 2015-133/CVE-2015-7183 bmo1205157 NSPR memory corruption issues - mozilla-nss was updated to 3.19.2.1 bsc952810 - MFSA...
Checkpoint Cross Site Scripting
Exploit Title: Checkpoint.com sub-domains Reflected XSS RXSS Date: 12/11/2015 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.checkpoint.com Version: / Category: Reflected Cross Site Scripting Google dork: Tested on: checkpoint.com sub-domains Checkpoint description :...
Apache Commons Collections Unserialize Java Vulnerability
For close to 10 months, a critical vulnerability in a library found in most Java rollouts has been twisting in the wind, unpatched, and until this week without proof-of-concept exploits that people paid attention to. Two researchers with NTT Com Security changed that dynamic last week when they...
