PT-2014-1744

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold and 8.1 Description A vulnerability ...

EFF Launches New Anti-Surveillance Site

The EFF has launched a new site dedicated to educating users about how to resist pervasive surveillance online, through the promotion of encryption and other tools and the publication of first-person stories from people around the world who have fought surveillance in various ways. The new site, ...

SUSE-SU-2015:0736-1 Security update for Linux kernel

The SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix various bugs and security issues. The following security bugs have been fixed: CVE-2014-1739: The mediadeviceenumentities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a...

IBM Domino 9.x < 9.0.1 Fix Pack 2 Multiple Vulnerabilities (uncredentialed check)

According to its version, the IBM Domino formerly IBM Lotus Domino application on the remote host is 9.x prior to 9.0.1 Fix Pack 2 FP2. It is, therefore, affected by the following vulnerabilities : - An unspecified error exists related to the TLS implementation and the IBM HTTP server that could...

CVE-2014-4820

Cross-site scripting XSS vulnerability in IBM Integration Bus Manufacturing Pack 1.x before 1.0.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2886

GKSu 2.0.2, when sudo-mode is not enabled, uses " double quote characters in a gksu-run-helper argument, which allows attackers to execute arbitrary commands in certain situations involving an untrusted substring within this argument, as demonstrated by an untrusted filename encountered during...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Integration Bus Manufacturing Pack 1.x before 1.0.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4820

IBM Integration Bus Manufacturing Pack is affected by Cross-site Scripting (CVE-2014-4820). The vulnerability exists in Manufacturing Pack 1.x prior to 1.0.0.1 and is described as allowing remote execution of arbitrary web script or HTML via unspecified vectors. The IBM Security Bulletin notes th...

CVE-2014-4820

Cross-site scripting XSS vulnerability in IBM Integration Bus Manufacturing Pack 1.x before 1.0.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2886

GKSu 2.0.2, when sudo-mode is not enabled, uses " double quote characters in a gksu-run-helper argument, which allows attackers to execute arbitrary commands in certain situations involving an untrusted substring within this argument, as demonstrated by an untrusted filename encountered during...

WordPress Mobile Pack 1.0.8223 - 2.0.1 Password Protected Post Disclosure

The WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps WordPress plugin was affected by a 2.0.1 Password Protected Post Disclosure security vulnerability...

CVE-2014-6237

Cross-site scripting XSS vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6237

CVE-2014-6237 is an XSS vulnerability in the News Pack extension (0.1.0 and earlier) for TYPO3, allowing remote authenticated users to inject arbitrary scripts via unspecified vectors. The connected TYPO3 security bulletin confirms that versions known to be vulnerable will no longer be available ...

CVE-2014-6237

Cross-site scripting XSS vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Yokogawa FAST/TOOLS XML External Entity

OVERVIEW Timur Yunusov, Alexey Osipov, and Ilya Karpov of Positive Technologies Inc. have identified an XML external entity processing vulnerability in the Yokogawa FAST/TOOLS application. Yokogawa has produced a service pack that mitigates this vulnerability. AFFECTED PRODUCTS The following...

IBM DB2 10.5 < Fix Pack 4 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 10.5 running on the remote host is affected by the following vulnerabilities : - An error exists related to JavaScript Object Notation JSON-C handling, string parsing, and the hash function that allows denial of service attacks. CVE-2013-6371 ...

WordPress Mobile Pack Plugin Information Disclosure Vulnerability

WordPress Mobile Pack Plugin is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-5337

The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php...

CVE-2014-5337

WordPress Mobile Pack Plugin for WordPress is affected (versions before 2.0.2). An information-disclosure vulnerability allows remote attackers to read password-protected posts via an exportarticles action to export/content.php. Remediation: update to version 2.0.2 or later.