DSA-2693-1 libx11 - several

Bulletin has no description...

CVE-2013-1996

X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function...

DSA-2692-1 libxxf86vm - several

Bulletin has no description...

Debian Security Advisory DSA 2683-1 (libxi - several vulnerabilities)

Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to...

DSA-2682-1 libxext - several

Bulletin has no description...

DSA-2673-1 libdmx - several

Bulletin has no description...

Debian: Security Advisory (DSA-2686-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VulnCheck KEV: CVE-2012-0518

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors...

Windows Single Sign On Credential Collector (Mimikatz)

This module will collect cleartext Single Sign On credentials from the Local Security Authority using the Kiwi Mimikatz extension. Blank passwords will not be stored in the database. This module requires Metasploit: https://metasploit.com/download Current source:...

Google Picasa < 3.9 Build 3.9.14.34 Multiple Vulnerabilities (Mac OS X)

The installed version of Google Picasa is earlier than 3.9 Build 3.9.14.34. As such, it is affected by the following vulnerabilities: - A buffer underflow vulnerability exists in the 'LZWDecodeCompat' function in the LibTIFF library. An attacker could exploit this issue through the use of a...

RedHat Update for tomcat5 RHSA-2013:0640-01

Check for the Version of tomcat5 OpenVAS Vulnerability Test RedHat Update for tomcat5 RHSA-2013:0640-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Nmap NSE 6.01: smb-security-mode

Returns information about the SMB security level determined by SMB. Here is how to interpret the output: User-level authentication: Each user has a separate username/password that is used to log into the system. This is the default setup of pretty much everything these days. Share-level...

Accela BizSearch Gateway Option for TeamWARE Spoofing Vulnerability

Overview Accela BizSearch Gateway Option for TeamWARE, when the TeamWARE Gateway and Single Sign-On are enabled, which allows remote attackers to spoof user accounts of TeamWARE Office under specified conditions. Impact A remote attacker could spoof user accounts of TeamWARE Office under specifie...

CVE-2012-1677

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via unknown vectors...

CVE-2012-1677

Technical details about CVE-2012-1677 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE repositories for affected products, versions, and remediation.

CVE-2012-1677: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via unknown vectors...

PT-2013-1528

Name of the Vulnerable Software and Affected Versions Oracle Application Server Single Sign-On affected versions not specified Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors. No information is available about the estimated...

Important: Red Hat Security Advisory: jbossas security update

Updated jbossas packages that fix one security issue are now available for JBoss Enterprise Application Platform 4.3.0 CP10 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVS...

Scientific Linux Security Update : selinux-policy enhancement update on SL6.x i386/x86_64 (20121218)

This update adds the following bugfixes : - Due to a bug in the SELinux policy, it was not possible to run a cron job with a valid MLS Multi Level Security context for the sysadmu SELinux user. This update fixes relevant SELinux policy rules and cron now works as expected in the described scenari...

CVE-2012-3546 Apache Tomcat Bypass of security constraints

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2012-3546 Apache Tomcat Bypass of security constraints Severity: Important Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.0 to 7.0.29 - - Tomcat 6.0.0 to 6.0.35 Earlier unsupported versions may also be affected Descriptio...