Symantec Data Loss Prevention Enforce Server Cross-Site Request Forgery Vulnerability

Symantec Data Loss Prevention DLP is a data leakage protection solution from Symantec Symantec. The program provides data leakage protection management and reporting and other functions. A cross-site request forgery vulnerability exists in the management console in Enforce Server in Symantec DLP...

Google Chrome Man-in-the-Middle Attack Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A man-in-the-middle attack vulnerability exists in versions of Google Chrome prior to 43.0.2357.65. The vulnerability allows attackers to conduct man-in-the-middle attacks...

PT-2015-4534 · Red Hat · Red Hat Enterprise Virtualization

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Virtualization RHEV Manager versions prior to 3.5.1 Description: The issue allows remote authenticated users to cause a denial of service by creating a long snapshot chain during live storage migration between domains, as t...

Google Chrome 'OpenPDFInReaderView::Update' memory misreference vulnerability

Google Chrome is a web browsing tool developed by Google. A memory misreference vulnerability exists in the 'OpenPDFInReaderView::Update' function in the browser/ui/views/locationbar/openpdfinreaderview.cc file in Google Chrome versions prior to 41.0.2272.76, which originates from the program...

PT-2015-5305 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.18.8 Description: The issue is related to the IPv4 implementation in the Linux kernel, which does not properly consider the length of the Read-Copy Update RCU grace period for redirecting lookups in the absenc...

DEBIAN-CVE-2015-1380

jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service abort via a crafted chunk-encoded body...

Google Chrome Denial of Service Vulnerability (CNVD-2015-00023)

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. A denial of service vulnerability exists in versions of Google Chrome prior to 11.0.696.65, which allows remote attackers to launch denial of service attacks via a crafted SVG document...

PT-2014-8309 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.17.4 Description: The issue allows local users to cause a denial of service, resulting in a system crash, by reading one byte beyond a /dev/zero page boundary. This is due to a problem in the clear user...

PT-2014-2335 · Plone · Plone

Name of the Vulnerable Software and Affected Versions: Plone versions prior to 4.2.3 Plone versions 4.3 prior to beta 1 Description: The issue allows remote attackers to obtain random numbers and derive the PRNG state for password resets. This could potentially be used to gain unauthorized access...

PT-2014-5432

Name of the Vulnerable Software and Affected Versions OpenStack Cinder versions prior to 2014.1.3 Description The issue allows remote authenticated users to obtain file data from the Cinder-volume host. This is achieved by cloning and attaching a volume with a crafted qcow2 header, exploiting the...

PYSEC-2014-32

Cross-site scripting XSS vulnerability in kssdevel.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

AZL-6802 CVE-2014-3618 affecting package procmail for versions less than 3.22-53

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."...

UBUNTU-CVE-2014-3174

modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients, which allows remote attackers to cause a denial of service read of...

Siteframe Beaumont 5.0.1 Search.PHP Q Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16596/info Siteframe Beaumont is prone to a cross-site scripting vulnerability. This issue affects the 'search.php' script. Siteframe Beaumont 5.0.1 and prior versions are reportedly vulnerable...

Claroline 1.x Rqmkhtml.PHP Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17343/info Claroline is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...

Hosting Controller 6.1 resellerresources.asp jresourceid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13806/info Hosting Controller is reported prone to multiple vulnerabilities. These issues can allow an attacker gain unauthorized access to data and carry out SQL injection attacks. These issues reportedly affect Hosting...

Tagit! Tagit2b 2.1.B Build 2 tagmin/updateconf.php admin Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...

Miraserver 1.0 RC4 article.php cat Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15960/info Miraserver is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

PHP Doc System 1.5.1 - Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15611/info PHP Doc System is prone to a local file-include vulnerability. This is due to the application's failure to properly sanitize user-supplied input. This may facilitate the unauthorized viewing of files and...

Unreal Tournament 2004 - NULL Pointer Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30427/info Unreal Tournament 2004 is prone to a remote denial-of-service vulnerability because the application fails to handle NULL-pointer exceptions. An attacker could exploit this issue to crash the affected applicatio...