Ubuntu: Security Advisory (USN-2171-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA10366 OSI vulnerability in Titan FTP Server

A directory traversal vulnerability was found in Titan FTP Server. By exploiting this vulnerability malicious users can list usernames or home folder. This vulnerability can be exploited remotely via specially designed parameters. Original advisories Changelog Exploitation Public exploits exist f...

Ubuntu Update for python-imaging USN-2168-1

Check for the Version of python-imaging OpenVAS Vulnerability Test $Id: gbubuntuUSN21681.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for python-imaging USN-2168-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is...

PT-2014-07: Sensitive Information Disclosure in Solar-Log

The specialists of the Positive Research center have detected a Sensitive Information Disclosure vulnerability in Solar-Log. CGI scripts used for backup and restore system data and configuration are not protected with password even if local authentication is enabled and could be accessed by an...

PT-2014-1324 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2 before 8.25.47 Cisco Adaptive Security Appliance ASA Software versions 8.4 before 8.47.5 Cisco Adaptive Security Appliance ASA Software versions 8.7 before 8.71.11 Cisco Adaptive...

PT-2014-1326 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2 before 8.25.47 Cisco Adaptive Security Appliance ASA Software versions 8.3 before 8.32.40 Cisco Adaptive Security Appliance ASA Software versions 8.4 before 8.47.3 Cisco Adaptive...

WHMCS多个未明安全漏洞

Bugtraq ID:66498 WHMCS是一套专为主机业务及其他在线交易开发的客户管理，财务，支持软件。 WHMCS存在未明安全漏洞，目前没有详细漏洞细节提供。 0 WHMCS 5.x WHMCS 5.2.17或5.3.6已经修复该漏洞，建议用户下载更新： http://www.whmcs.com...

KLA10297 Multiple vulnerabilities in PostgreSQL

Multiple serious vulnerabilities have been found in PostgreSQL. Malicious users can exploit these vulnerabilities to cause denial of service, unauthorized tables access, bypass group politics restrictions and gain privileges. Below is a complete list of vulnerabilities 1. An improper value check...

Demaecan for Android. contains an issue where it fails to verify SSL server certificates

Overview Demaecan for Android. contains an issue where it fails to verify SSL server certificates. kurisu and matt reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A man-in-the-minddle attack may allow an...

KLA10194 SB vulnerability in HP SMH

CSRF vulnerability was found in the HP SMH. By exploiting this vulnerability malicious users can hijack auth. This vulnerability can be exploited from remote by unknown vectors. Original advisories - Related products HP-System-Management-Homepage CVE list CVE-2013-6188 high Solution Update to...

KLA10588 Multiple vulnerabilities in Wireshark

Buffer overflow vulnerabilities were found in Wireshark. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed packet trace. Original advisories WNPA advisory Exploitation...

KLA10009 Denial of Service in VideoLAN VLC Media Player

An unspecified vulnerability was found in VLC versions 2.0.7 and earlier. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network through a specially designed playlist file. Original advisories NVD Related products...

KLA10261 RLF vulnerability in McAfee ePolicy Orchestrator

An unspecified vulnerability was found in McAfee ePolicy Orchestrator. By exploiting this vulnerability malicious users can read arbitrary files. This vulnerability can be exploited remotely via a specially designed XML file. Original advisories - Related products McAfee-ePolicy-Orchestrator CVE...

PT-2014-1185 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.35 and earlier Oracle MySQL Server versions 5.6.15 and earlier Description: The issue affects the availability of data in Oracle MySQL Server, related to the Partition component. It allows remote authenticated...

Titan FTP Server < 10.40.1829 Multiple Directory Traversal Vulnerabilities

Titan FTP Server is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2014-2158 · Libnet6 · Libnet6

Name of the Vulnerable Software and Affected Versions: libnet6 versions prior to 1.3.14 Description: The issue allows remote attackers to obtain sensitive information, such as server-usage patterns by a particular user and color preferences, due to a lack of authentication before checking the use...

KLA10039 Adobe Digital Editions security advisory

An unspecified vulnerability was found in Adobe Digital Editions. By exploiting this vulnerability malicious users can execute arbitrary code or cause denial of service. This vulnerability can be exploited from the network at point related to an unknown application. Original advisories Adobe...

tetra filer vulnerable to directory traversal

Overview tetra filer provided by Yuichiro Okuyama contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Ryohei Koike of Sakura Information Systems Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

TYPO3 < 4.3.4, 4.4.0 Multiple Vulnerabilities (TYPO3-SA-2010-012)

TYPO3 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...

TYPO3 Backend Open Redirection Vulnerability (TYPO3-SA-2010-012) - Active Check

TYPO3 is prone to an open redirect vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...