Ubuntu 10.04 LTS : linux vulnerability (USN-2525-1)

It was discovered that the Linux kernel's Infiniband subsystem did not properly sanitize its input parameters while registering memory regions from userspace. A local user could exploit this flaw to cause a denial of service system crash or to potentially gain administrative privileges. Note that...

Ubuntu 14.10 : linux vulnerability (USN-2530-1)

It was discovered that the Linux kernel's Infiniband subsystem did not properly sanitize its input parameters while registering memory regions from userspace. A local user could exploit this flaw to cause a denial of service system crash or to potentially gain administrative privileges. Note that...

Microsoft Exchange Server CVE-2015-1630 Cross Site Scripting Vulnerability

Description Microsoft Exchange Server is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow...

Microsoft Exchange Server CVE-2015-1632 Cross Site Scripting Vulnerability

Description Microsoft Exchange Server is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow...

Fedora 20 : lftp-4.5.4-3.fc20 (2015-2736)

one bug fixed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 22 : csync2-1.34-15.fc22 / duplicity-0.6.25-3.fc22 / librsync-1.0.0-1.fc22 / etc (2015-2923)

Changes in librsync 1.0.0 2015-01-23 ====================================== - SECURITY: CVE-2014-8242: librsync previously used a truncated MD4 'strong' check sum to match blocks. However, MD4 is not cryptographically strong. It's possible that an attacker who can control the contents of one part...

Seagate Confirms NAS Zero Day, Won't Patch Until May

Seagate, over the weekend, confirmed the zero-day vulnerability in its Seagate Business Storage 2-Bay NAS boxes disclosed March 1. But in the same breath, told customers exposed to the vulnerability that a patch is still two months away. “For those customers who choose to keep their networks open...

Ubuntu 12.04 LTS : icu regression (USN-2522-2)

USN-2522-1 fixed vulnerabilities in ICU. On Ubuntu 12.04 LTS, the font patches caused a regression when using LibreOffice Calc. The patches have been temporarily backed out until the regression is investigated. We apologize for the inconvenience. It was discovered that ICU incorrectly handled...

Microsoft warning: Windows PC there are also Freak security vulnerability-vulnerability warning-the black bar safety net

Microsoft on Friday warned that hundreds of millions of Windows PC users are facing a“Freak”security vulnerability threats, and that a newly discovered security vulnerability was initially considered only for mobile devices and Apple Mac computers pose a threat. On Tuesday, by 9 The name of...

Important: Red Hat Bug Fix Advisory: nss, nss-softokn, nss-util, and nspr bug fix and enhancement update

Updated nss, nss-softokn, nss-util, and nspr packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7. Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server...

Fortimail 5.2.1 Cross Site Scripting

I. VULNERABILITY ------------------------- XSS Reflected vulnerabilities in Fortimail version 5.2.1 II. BACKGROUND ------------------------- Fortinet’s industry-leading, Network Security Platforms deliver Next Generation Firewall NGFW security with exceptional throughput, ultra low latency, and...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2513-1)

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2512-1)

A race condition was discovered in the Linux kernel's key ring. A local user could cause a denial of service memory corruption or panic or possibly have unspecified impact via the keyctl commands. CVE-2014-9529 A memory leak was discovered in the ISO 9660 CDROM file system when parsing rock ridge...

F5 Networks BIG-IP : NTP vulnerability (SOL15936)

Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to 1 the cryptorecv function when the Autokey Authentication feature is used, 2 the ctlputdata function, and 3 the configure function. C Tenable Network...

libcsoap 'nanohttp-server.c' buffer overflow vulnerability

libpcap is a package of network data capture functions for the unix/linux platform. A buffer overflow vulnerability exists in libcsoap 'nanohttp-server.c', which can be exploited by remote attackers to launch a denial-of-service attack or execute arbitrary code in context...

USN-2504-1 nss update

The NSS package contained outdated CA certificates. This update refreshes the NSS package to version 3.17.4 which includes the latest CA certificate bundle...

CVE-2015-1358

Siemens SIMATIC WinCC (TIA Portal) CVE-2015-1358: The remote-management modules in WinCC (TIA Portal) Multi Panels, Comfort Panels and RT Advanced, and in WinCC Flexible panels/runtime before the stated SPs, transmit credentials in weak or unencrypted form. This allows network-sniffing attackers ...

Cisco IOS Software Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability exists in Cisco IOS Software, which can be exploited by an attacker to reload the device and deny service to legitimate users...

Microsoft Internet Explorer CVE-2015-0038 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Fedora 21 : e2fsprogs-1.42.12-1.fc21 (2015-1840)

New upstream release Security fix for CVE-2015-0247 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...