1983 matches found
FreeBSD Ports: bind99
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: eperl
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
DSA-2548-1 tor - several
Bulletin has no description...
FreeBSD Ports: gatekeeper
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MODX Website Compromise
On Wednesday August 29, a hacker exploited a Local File Inclusion LFI vector in an older release of MODX Revolution we had running on one of our servers. This issue had already been fixed as part of the MODX Revolution 2.2.4 release. We locked down the site while we investigated the compromise...
DSA-2535-1 rtfm - cross-site scripting
Bulletin has no description...
Timing attack on the password reset - ownCloud
The "Lost Password" implementation is vulnerable to a Remote Timing Attack. The token used to secure the password reset is fetched from the database and compared to the user-specified value using the equals operator. An attacker successfully rebuilding the token can then specify an arbitrary...
FreeBSD : libotr -- buffer overflows (c651c898-e90d-11e1-b230-0024e830109b)
OTR developers report : The otrlbase64otrdecode function and similar functions within OTR suffer from buffer overflows in the case of malformed input; specifically if a message of the format of '?OTR:===.' is received then a zero-byte allocation is performed without a similar correlation between...
JVN#90389651: Multiple web browsers vulnerable in processing Tranfer-Encoding header
Multiple web browsers contain a vulnerability in processing the Transfer-Encoding header. When viewing a malicious web site through a proxy server, part of the HTTP response may be misidentified as a response from a different server. Impact An arbitrary script may be executed on the user's web...
libotr -- buffer overflows
OTR developers report: The otrlbase64otrdecode function and similar functions within OTR suffer from buffer overflows in the case of malformed input; specifically if a message of the format of "?OTR:===." is received then a zero-byte allocation is performed without a similar correlation between t...
DSA-2510-1 extplorer - Cross-site request forgery
Bulletin has no description...
DSA-2504-1 libspring-2.5-java - information disclosure
Bulletin has no description...
FreeBSD Ports: pidgin-otr
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
ESA-2012-019: EMC Documentum Information Rights Management Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-019: EMC Documentum Information Rights Management Multiple Vulnerabilities. EMC Identifier: ESA-2012-019 CVE Identifiers: CVE-2012-2276, CVE-2012-2277 Severity Rating: CVSS v2 Base Score: 6.3 AV:N/AC:M/Au:S/C:N/I:N/A:C Affected products: EMC...
FreeBSD Ports: wordpress
The remote host is missing an update to the system as announced in the referenced advisory. VID b384cc5b-8d56-11e1-8d7b-003067b2972c OpenVAS Vulnerability Test $ Description: Auto generated from VID b384cc5b-8d56-11e1-8d7b-003067b2972c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
DSA-2445-1 typo3-src - several
Bulletin has no description...
DSA-2444-1 tryton-server - privilege escalation
Bulletin has no description...
DSA-2441-1 gnutls26 - missing bounds check
Bulletin has no description...