910 matches found
Insufficiently random session id in Java SockJS client
Session id generation in the Java SockJS client is not sufficiently secure and could allow a user to send messages to another user’s session. Note that this only affects users of the Java SockJS client, which generates its own session id. It does not affect browser clients even if they’re...
BELL-CVE-2014-3710 CVE-2014-3710 does not affect BellSoft software
Bulletin has no description...
F5 Networks BIG-IP : BIND vulnerability (SOL10366)
The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL10366. The text description of this plugin is C F5 Networks...
F5 Networks BIG-IP : TMM vulnerability (SOL13233)
The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL13233. The text description of this plugin is C F5 Networks...
F5 Networks BIG-IP : BIND denial-of-service attack (SOL14201)
A vulnerability exists in the BIND DNS server process that may allow a remote attacker to initiate a denial-of-service DoS attack against the DNS service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution...
BELL-CVE-2014-3182 CVE-2014-3182 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2014-4611 CVE-2014-4611 does not affect BellSoft software
Bulletin has no description...
[oss-security] CVE request: Drupal Flag 7.x-3.5 Module Vulnerability report: Arbitrary code execution due to improper input handling in flag importer
Good morning, Could a CVE please be assigned to http://seclists.org/fulldisclosure/2014/May/44 if one has not been already? Apart from version 7, drupal6-flag-2.1-1.fc20 looks affected - patch applies, but I did not test it. For an older version, drupal6-flag-1.3-3.fc19 appears unaffected. Cheers...
ESA-2014-011: RSA BSAFE® Micro Edition Suite Server Crash Vulnerability
ESA-2014-011.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-011: RSA BSAFE® Micro Edition Suite Server Crash Vulnerability EMC Identifier: ESA-2014-011 CVE Identifier: CVE-2014-0628 Severity Rating: CVSS v2 Base Score: 5.4 AV:N/AC:H/Au:N/C:N/I:N/A:C Affected Products: RSA BSAFE Micro...
BELL-CVE-2014-0032 CVE-2014-0032 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2013-2889 CVE-2013-2889 does not affect BellSoft software
Bulletin has no description...
Fedora Update for kbreakout FEDORA-2013-10130
Check for the Version of kbreakout OpenVAS Vulnerability Test Fedora Update for kbreakout FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
BELL-CVE-2013-2546 CVE-2013-2546 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2012-6544 CVE-2012-6544 does not affect BellSoft software
Bulletin has no description...
XSS vulnerability on Tracking page.
PMASA-2011-3 Announcement-ID: PMASA-2011-3 Date: 2011-05-22 Summary XSS vulnerability on Tracking page. Description It was possible to create a crafted table name that leads to XSS. Severity We consider this vulnerability to be serious. Mitigation factor This vulnerability works in the context of...
Mandriva Linux Security Advisory : apache (MDVSA-2011:057)
The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module apache-mpm-itk for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by...
Gentoo Security Advisory GLSA 201006-03 (imagemagick)
The remote host is missing updates announced in advisory GLSA 201006-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
BELL-CVE-2010-4529 CVE-2010-4529 does not affect BellSoft software
Bulletin has no description...