[ MDVSA-2015:209 ] php

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:209 http://www.mandriva.com/en/support/security/ Package : php Date : April 27, 2015 Affected: Business Server 1.0, Business Server 2.0 Problem Description: Updated php packages fix security vulnerabilities:...

Apple iOS 8.3 Includes Long List of Security Fixes

Apple has released iOS 8.3, a major security upgrade for iPhone and iPad users that includes patches for more than three dozen vulnerabilities. The new version of iOS has security fixes for several vulnerabilities in the mobile operating system’s kernel, a handful of code-execution bugs and a lon...

SUSE-SU-2015:0795-1 Security update for rubygem-bundler

The Rubygem Bundler was updated to version 1.7.0. Bundler 1.7 is a security-only release to address CVE-2013-0334, a vulnerability where a gem might be installed from an unintended source server, particularly while using both rubygems.org and gems.github.com. Upstream changes entry with more...

Topline Systems Opportunity Form vulnerable to information disclosure

Overview Topline Systems Opportunity Form contains an information disclosure vulnerability. Description CWE-200: Information Exposure Topline Systems Opportunity Form is a macro-enabled Excel spreadsheet that contains connection strings to a public-facing database. By running procedures included ...

Python 'bufferobject. c'integer overflow vulnerability-vulnerability warning-the black bar safety net

Affected system: Python python Not affected system: Python python 2.7.8 Description: BUGTRAQ ID: 7 0 0 8 9 Python is an object-oriented, literal translation-computer programming languages. Python 2.7.8 the previous version did not properly check the user data of the boundary, in the'bufferobject...

WordPress plugin broke vulnerability 1 7 0 million website fear affected-vulnerability warning-the black bar safety net

Recently, security research firm Sucuri said, one of the popular Wordpress plugin MailPoet is suspected there may be vulnerabilities that can allow hackers made the site fully control. MailPoet is a Wordpress flow line for the production and management of promotional emails plugin, downloaded ove...

Threat Outbreak Alert: Fake Internet Banking Security Upgrade Notice Email Messages on March 18, 2014

Medium Alert ID: 33398 First Published: 2014 March 18 19:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain a new security program for the recipient. The text in the email message attempts to convince th...

WordPress WP e-Commerce Plugin - Multiple Security Vulnerabilities

WP e-Commerce plugin is prone to multiple security vulnerabilities, such as a local file include, arbitrary file upload and multiple remote code execution vulnerabilities. An attacker can upload arbitrary files to the affected computer that may result in arbitrary code execution within the contex...

Google Blocks Malicious File Downloads Automatically in Chome

Google has fixed five vulnerabilities in its Chrome browser and also has activated a feature that will block malicious file downloads automatically. The change is a major security upgrade for Chrome and will help prevent users from unwittingly downloading harmful files, an attack vector that...

Fedora 19 : kernel-3.12.5-200.fc19 (2013-23653)

The 3.12.5 kernel contains support for new devices, and a number of bug fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

PHPFox v3.4.1 XSS vulnerabilities

Malicious users may inject JavaScript, VBScript, ActiveX, HTML or Flash into a vulnerable application to fool a user in order to gather data from them. An attacker can steal the session cookie and take over the account, impersonating the user. It is also possible to modify the content of the page...

PHPFox 3.4.1 Cross Site Scripting

PHPFox v3.4.1 XSS vulnerabilities ------------------------------------------------------------ == Description == - Software link: http://www.phpfox.com - Affected versions: version 3.4.1 and 3.5.1 is vulnerable. Other versions might be affected as well. - Vulnerability discovered by: Mehdi Dadkha...

Oracle Linux 4 : HelixPlayer (ELSA-2007-0605)

From Red Hat Security Advisory 2007:0605 : An updated HelixPlayer package that fixes a buffer overflow flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. A buffer overflow flaw was found in the...

Google Strengthening Keys on SSL Certificates to 2048 Bits

As attacks against cryptographic systems and the SSL infrastructure have advanced in recent years, experts have begun to fret about the future utility of the system. Companies that rely on the security of the SSL technology are beginning to take steps to address the issue, with the latest being...

Zitmo Trojan Variant Eurograbber Beats Two-Factor Authentication to Steal Millions

Online banking customers in Europe are falling victim by the thousands to a new banking Trojan that is infecting Android and BlackBerry devices and is capable of defeating two-factor authentication. The Trojan, dubbed Eurograbber by researchers at Check Point Software Technologies and Verasafe, i...

[ MDVSA-2012:143 ] python-django

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:143 http://www.mandriva.com/security/ Package : python-django Date : August 23, 2012 Affected: 2011., Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in...

update for chromium, v8 (important)

Version upgrade of chromium to address multiple security vulnerabilities...

java-1_6_0-openjdk: critical (critical)

This version upgrade of java-160-openjdk fixes multiple security flaws: - S7079902, CVE-2012-1711: Refine CORBA data models - S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. - S7143614, CVE-2012-1716: SynthLookAndFeel stability...

IBM Lotus Quickr QP2 ActiveX Overflow

Added: 05/31/2012 CVE: CVE-2012-2176 BID: 53678 OSVDB: 82166 Background IBM Lotus Quickr is a team collaboration solution that provides teams with a data repository, and interfaces with Lotus Notes, Sametime, Symphony, and more. Problem The Lotus Quickr client installs several ActiveX controls on...

Adobe Patches 13 Flaws in Photoshop, Flash Professional and Other Apps

Adobe has released patches for a series of vulnerabilities in its product line, including Photoshop, Illustrator, Flash Professional and Shockwave. Several of the vulnerabilities can be used to take complete control of affected machines. The highest-priority vulnerabilities among those patched...