4844 matches found
elvira.mav-start.hu XSS vulnerability
Vulnerable URL: http://elvira.mav-start.hu/elvira.dll/x/uf?iehack=?=559E98F6=-1=0=2====&charset=UTF-8==%27-alert%28/xssposed/%29-%27===15.07.09=58=Timetable Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...
NSS incorrectly permits skipping of ServerKeyExchange — Mozilla
Security researcher Karthikeyan Bhargavan reported an issue in Network Security Services NSS where the client allows for a ECDHEECDSA exchange where the server does not send its ServerKeyExchange message instead of aborting the handshake. Instead, the NSS client will take the EC key from the ECDS...
The vulnerability of Xen hypervisors allows a perpetrator to execute arbitrary code.
The vulnerability of the QEMU hypervisor component in Xen is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted packets containing fields such as TXSTATUSSTARTPACKET and TXSTATUSDEVIC...
WordPress FingerPrinter Tool: Plecost
Plecost is a vulnerability fingerprinting and vulnerability finder for WordPress blog engine Why? There are a huge number of WordPress around the world. Most of them are exposed to be attacked and be converted into a virus, malware or illegal porn provider, without the knowledge of the blog owner...
PT-2015-6336 · Dave Coffin +2 · Dcraw +2
Name of the Vulnerable Software and Affected Versions: dcraw versions 7.00 and earlier Description: The issue is related to an integer overflow in the ljpeg start function, which can be triggered by a crafted image. This overflow is associated with the len variable and can cause a denial of servi...
RHEL 7 : qemu-kvm-rhev (RHSA-2015:1000) (Venom)
Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Virtualization Hypervisor 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...
AZL-44211 CVE-2015-3310 affecting package ppp for versions less than 2.5.0-1
Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service crash via a start accounting message to the RADIUS server...
Buffer overflow
Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service crash via a start accounting message to the RADIUS server...
Multiple Cross-Site Request Forgery Vulnerabilities in Landesk Management Suite
LANDESK Management Suite is a set of IT systems management solutions from the U.S. company LANDESK. A cross-site request forgery vulnerability exists in LANDESK Management Suite 9, which allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicious...
CVE-2015-3310
Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service crash via a start accounting message to the RADIUS server...
SuSE 11.3 Security Update : MySQL (SAT Patch Number 10387)
The MySQL datebase server was updated to 5.5.42, fixing various bugs and security issues. More information can be found on : - http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5- 42.html - http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5- 41.html -...
Scientific Linux Security Update : libreoffice on SL7.x x86_64 (20150305)
It was found that LibreOffice documents executed macros unconditionally, without user approval, when these documents were opened using LibreOffice. An attacker could use this flaw to execute arbitrary code as the user running LibreOffice by embedding malicious VBA scripts in the document as macro...
Asus RT-G32 Router Cross-Site Scripting Vulnerability
ASUS RT-G32 is a wireless router product from ASUS. A cross-site scripting vulnerability exists in the Asus RT-G32 router. The vulnerability exists because the startapply.htm script fails to adequately filter 'nextpage', 'groupid', 'actionscript ' and 'flag' parameters. A remote attacker could us...
Tesla high-risk vulnerabilities-no need the key to open the vehicle-vulnerability warning-the black bar safety net
1 on 2 1, 3 6 0 the network attack and Defense laboratory released a second example of the Tesla high-risk vulnerabilities---without the key the vehicle on. Combination 3 6 0 the first report of remote control vehicles, realize unlocking, whistle, flashing lights of the vulnerability, a hacker ca...
Sysmon v2.0 - System Activity Monitor for Windows
System Monitor Sysmon is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log. It provides detailed information about process creations, network connections, and changes to...
Unspecified Vulnerability in Oracle Java SE 2D Subpart (CNVD-2015-00576)
Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability exists in the Oracle Java SE 2D subcomponent, which allows an attacker to build untrustworthy Java Web Start applications and untrustworthy Java...
Unspecified Arbitrary Code Execution Vulnerability in Oracle Java SE Hotspot Subpart (CNVD-2015-00566)
Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability in the Oracle Java SE Hotspot subcomponent allows attackers to exploit the vulnerability to build untrustworthy Java Web Start applications and...
Unspecified Vulnerability in Oracle Java SE Serviceability Subpart (CNVD-2015-00554)
Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability exists in the Oracle Java SE Serviceability subcomponent, which allows an attacker to build untrustworthy Java Web Start applications and...
Unspecified Local Vulnerability in Oracle Java SE/Java SE Embedded/JRockit Hotspot Subcomponents (CNVD-2015-00563)
Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications.Oracle JRockit is a comprehensive portfolio of Java runtime solutions that includes the industry's fastest standard Java solutions. An unspecified security vulnerability in the Oracle...
Unspecified Vulnerability in Oracle Java SE Deployment Subcomponent (CNVD-2015-00562)
Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability exists in the Oracle Java SE Deployment subcomponent, which allows an attacker to build untrustworthy Java Web Start applications and untrustwort...