7055 matches found
CVE-2012-2843
Removed by vendor...
CVE-2012-2843
CVE-2012-2843 is a use-after-free vulnerability in Google Chrome prior to 20.0.1132.57. It allows remote attackers to cause a denial of service or potentially other impact via vectors related to layout height tracking. Affected software: Google Chrome earlier than 20.0.1132.57. Root cause: use-af...
Wireless Carriers See Spike in Cell Phone Records Requests
Some of the nation’s largest wireless carriers say they last year collectively received some 1.3 million requests from law enforcement for customers’ phone records – a number that continues to rise. The information shared with police includes geolocation information, content of text messages,...
Google Reportedly Near Settlement With FTC on Safari Tracking
The FTC is nearing completion of its investigation into allegations that Google used a special technique to circumvent the privacy settings on Safari to enable better tracking of users, even when tracking was disabled by the user. The decision may cost Google millions of dollars in fines, but it’...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Cisco Pulls Back on Routers' 'Supplemental Privacy Policy'
Cisco appears to have retracted a controversial addition to its privacy policy that allowed the company to track data, including complete Internet histories, for users of its Linksys E2700, E3500 and E4500 routers. The policy revisions were part of an automatic firmware update that outraged users...
CVE-2012-0897
creationtimestamp| type| source ---|---|--- 2012-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19519 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/irfanviewjpeg2000bof.rb 2025-02-06...
Debian DSA-2500-1 : mantis - several vulnerabilities
Several vulnerabilities were discovered in Mantis, an issue tracking system. - CVE-2012-1118 Mantis installation in which the privatebugviewthreshold configuration option has been set to an array value do not properly enforce bug viewing restrictions. - CVE-2012-1119 Copy/clone bug report actions...
DSA-2500-1 mantis - several
Bulletin has no description...
[SECURITY] Fedora 17 Update: nut-2.6.3-4.fc17
These programs are part of a developing project to monitor the assortment of UPSes that are found out there in the field. Many models have serial ports of some kind that allow some form of state checking. This capability has been harnessed where possible to allow for safe shutdowns, live status...
[SECURITY] Fedora 16 Update: nut-2.6.3-4.fc16
These programs are part of a developing project to monitor the assortment of UPSes that are found out there in the field. Many models have serial ports of some kind that allow some form of state checking. This capability has been harnessed where possible to allow for safe shutdowns, live status...
[SECURITY] Fedora 15 Update: nut-2.6.3-4.fc15
These programs are part of a developing project to monitor the assortment of UPSes that are found out there in the field. Many models have serial ports of some kind that allow some form of state checking. This capability has been harnessed where possible to allow for safe shutdowns, live status...
pycrypto -- vulnerable ElGamal key generation
Dwayne C. Litzenberger of PyCrypto reports: In the ElGamal schemes for both encryption and signatures, g is supposed to be the generator of the entire Z^p group. However, in PyCrypto 2.5 and earlier, g is more simply the generator of a random sub-group of Z^p. The result is that the signature spa...
Apple Safari Webkit Multiple Vulnerabilities (May 2012) - Mac OS X
Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...
Twitter Implements Do Not Track
Twitter has implemented the Do Not Track header on its site, giving users the option of telling the site that they do not want to be tracked across other sites on the Web. The implementation is being done through the DNT technology in the Firefox browser. Firefox, like other major browsers, allow...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 4186)
This kernel update fixes the following security problems : - The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers IPV6RTHDRTYPE0 that create network amplification between two routers. CVE-2007-2242 The default is that RH0 is disabled now. To...
Liferay Portal 6.0.x < 6.1 - Privilege Escalation
Liferay users can assign themselves to organizations, leading to possible privilege escalation Description: Liferay Portal is an enterprise portal written in Java Due to insufficient permission checking in the updateOrganizations method of UserService any user can assign hem or her self to any...
Senator Seeks More Info On DOJ Location Tracking Practices
Senator Al Franken D-MN is demanding answers to questions about the U.S. Department of Justice DOJ practice of gathering data from wireless providers in order to monitor individuals’ movements using mobile phone location data. Franken released a copy of a letter to Attorney General Eric Holder on...
CVE-2012-0676
WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors...