DLA-158-1 request-tracker3.8 - security update

Bulletin has no description...

[SECURITY] [DSA 3176-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3176-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 26, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3176-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3176-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 26, 2015 http://www.debian.org/security/faq -...

rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities

Best Practical reports: RT 3.0.0 and above, if running on Perl 5.14.0 or higher, are vulnerable to a remote denial-of-service via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This...

DSA-3176-1 request-tracker4 - security update

Bulletin has no description...

Debian Security Advisory DSA 3176-1 (request-tracker4 - security update)

Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-9472 Christian Loos discovered a remote denial of service vulnerability, exploitable via the...

Debian: Security Advisory (DSA-3176-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

noVNC 'include/webutil.js' session hijacking vulnerability

NOVNC is a VNC client , using HTML 5 WebSockets, Canvas and JavaScript technology . A session hijacking vulnerability exists in noVNC 'include/webutil.js', which allows attackers to exploit the vulnerability to gain unauthorized access to the application...

IBM Content Navigator Cross-Site Scripting Vulnerability

IBM Content Navigator is a Web client from IBM USA that supports searching and processing documents stored in content servers around the world from a Web browser. A cross-site scripting vulnerability exists in IBM Content Navigator, which can be exploited by remote attackers to inject arbitrary w...

Multiple Cross-Site Scripting Vulnerabilities in Landsknecht Adminsystems CMS

Landsknecht Adminsystems CMS is a content management system. A cross-site scripting vulnerability exists in Landsknecht Adminsystems CMS, which allows attackers to exploit the vulnerability to obtain sensitive information and hijack sessions...

Siemens SCALANCE X-200IRT < 5.2.0 Session Hijacking

Binary data scadasiemensscalancex200cve-2015-1049.nbin...

BlinkSale Bug Bounty #1 - Encode & Validation Vulnerability

Document Title: =============== BlinkSale Bug Bounty 1 - Encode & Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1416 Release Date: ============= 2015-02-06 Vulnerability Laboratory ID VL-ID: ====================================...

Siemens SCALANCE X-200IRT Web Server Session Hijacking Vulnerability

Siemens SCALANCE X-200IRT is an industrial Ethernet switch from Siemens, Germany. A security vulnerability exists in the web server in Siemens SCALANCE X-200IRT switches prior to version 5.2.0. A remote attacker could exploit the vulnerability to hijack a session...

CVE-2015-1049

The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors...

Code injection

The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors...

CVE-2015-1049

The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors...

Banner Effect Header 1.2.7 Cross Site Scripting

Information ------------ Advisory by Netsparker. Name: XSS Vulnerability in Banner Effect Header Affected Software : Banner Effect Header Affected Versions: 1.2.7 and possibly below Vendor Homepage : https://wordpress.org/plugins/banner-effect-header/ Vulnerability Type : Cross-site Scripting...

Blubrry PowerPress 6.0 Cross Site Scripting

Information ------------ Advisory by Netsparker Name: XSS Vulnerability in Blubrry PowerPress Affected Software : Blubrry PowerPress Affected Versions: 6.0 and possibly below Vendor Homepage : https://wordpress.org/plugins/powerpress/ Vulnerability Type : Cross-site Scripting Severity : Important...

Barracuda Networks Cloud Series - Filter Bypass

Document Title: =============== Barracuda Networks Cloud Series - Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=754 Barracuda Networks Security ID BNSEC: 731 Release Date: ============= 2015-01-19 Vulnerability Laboratory ID...

TechSmith Camtasia 'ProjectName_controller.swf' Cross-Site Scripting Vulnerability

TechSmith Camtasia a tool specialized in recording screen actions, it can easily record screen actions in any color mode, including images, sound effects, mouse tracks, narration sounds and more. A cross-site scripting vulnerability exists in TechSmith Camtasia 'ProjectNamecontroller.swf', which...