SOL15605 - XML Entity Injection vulnerabilities CVE-2014-6032 and CVE-2014-6033

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

openSUSE Security Update : procmail (openSUSE-SU-2014:1114-1)

procmail was updated to fix a heap-overflow in procmail's formail utility when processing specially crafted email headers bnc894999, CVE-2014-3618 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

openSUSE: Security Advisory for procmail (openSUSE-SU-2014:1114-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for procmail CESA-2014:1172 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: procmail security update

Updated procmail packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2014-4864

The NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing cleartext passwords, which might allow remote attackers to obtain sensitive information by reading a file...

CVE-2014-4864

CVE-2014-4864 affects the NETGEAR ProSafe Plus Configuration Utility. The issue is that configuration backup files created by the utility expose passwords in plaintext, enabling (where backup files are accessible) an attacker to obtain sensitive credentials. The linked sources indicate this affec...

PT-2014-6175

Name of the Vulnerable Software and Affected Versions NETGEAR ProSafe Plus Configuration Utility affected versions not specified Description The issue allows remote attackers to obtain sensitive information by reading a configuration backup file that contains cleartext passwords. Recommendations ...

CVE-2014-4864: Undefined Security Weakness

The NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing cleartext passwords, which might allow remote attackers to obtain sensitive information by reading a file...

MGASA-2014-0373 Updated procmail packages fix CVE-2014-3618

Updated procmail package fixes security vulnerability: A heap-based buffer overflow was reported in procmail's formail utility when parsing addresses with unbalanced quotes CVE-2014-3618...

Updated procmail packages fix CVE-2014-3618

Updated procmail package fixes security vulnerability: A heap-based buffer overflow was reported in procmail's formail utility when parsing addresses with unbalanced quotes CVE-2014-3618...

SOL15564 - TLS vulnerability CVE-2014-3511

1 If you are planning to upgrade to BIG-IP APM 11.5.1 HF6 to mitigate this issue, you should instead upgrade to 11.5.1 HF7 to avoid an issue specific to BIG-IP APM. For more information, refer to SOL15914: The tmm process may restart and produce a core file after BIG-IP APM systems are upgraded...

[SECURITY] [DLA-46-1] procmail update

Debian Security Advisory DLA-0023-1 https://wiki.debian.org/LTS Package : procmail Version : 3.22-19+deb6u1 CVE ID : CVE-2014-3618 Debian Bug : 704675 760443 Boris pi Piwinger and Tavis Ormandy reported a heap overflow vulnerability in procmails formail utility when processing specially-crafted...

DSA-3019-1 procmail - security update

Bulletin has no description...

HP System Management Homepage Login Utility

This module attempts to login to HP System Management Homepage using host operating system authentication. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/smh' require...

file utility memory corruption

Memory corruption CDF format parsing...

SOL15532 - XSS vulnerability in echo.jsp CVE-2014-4023

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

SOL15461 - OpenSSL vulnerability CVE-2011-4619

Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, then no upgrade candidate currently exists. Note: SGC...

DomainHostingView v1.61 - Show domain hosting information

DomainHostingView is a utility for Windows that collects extensive information about a domain by using a series of DNS and WHOIS queries, and generates HTML report that can be displayed in any Web browser. The information displayed by the report of DomainHostingView includes: the hosting company ...

Vulnerability Fixed in Subnet Solutions SCADA Server

A hole has been fixed in a popular industrial control system data management server that if left unpatched, could result in a remotely exploitable denial of service condition. Subnet Solutions, Inc., a Canadian manufacturer of electric utility products, fixed the vulnerability – along with anothe...