3379 matches found
openSUSE Security Update : opera (openSUSE-SU-2010:0540-1)
This update of opera fixes the following vulnerabilities : - CVE-2010-2576: CVSS v2 Base Score: 6.8 CWE-94: unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewitt of Secunia - CVE-2010-3019: CVSS v2 Base Score: 9.3 CWE-119: hea...
Important: Red Hat Security Advisory: openssl098e security update
Updated openssl098e packages that fix one security issue are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
CentOS Update for openssl098e CESA-2014:0626 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openssl security update
CentOS Errata and Security Advisory CESA-2014:0624 Updated openssl packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base...
Important: Red Hat Security Advisory: openssl security update
Updated openssl packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
FreeBSD Security Advisory FreeBSD-SA-14:09.openssl [REVISED]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:09.openssl Security Advisory The FreeBSD Project Topic: OpenSSL use-after-free vulnerability Category: contrib Module: openssl Announced: 2014-04-30 Affects:...
FineCMS存储型xss可盲打后台管理员
简要描述： 某处没有过滤导致可xss 详细说明： FineCMS v2（简称v2）是Php+Mysql开发的一款开源的跨平台网站内容管理系统，以“实用+好用”为基本产品理念。 但是良好的设计不等于良好的实现，该cms在会员中心处对于xss代码完全没有进行过滤。导致只要开启了会员功能即可盲打管理员： 有如下几个输出点： 0x01：设置空间名称处，该处允许超长的字符，设置"alert1试试 保存之后，刷新页面： 也许这样就过去了，但是当管理员访问此人空间的时候，xss代码又再一次被触发（因此可用来打管理员）： 0x02：除此之外，日志功能的标题处也存在跨站：...
Sagem Fast 3304-V2 - Authentication Bypass (1)
Title : Sagem F@st 3304-V2 Authentication Bypass Vendor : http://www.sagemcom.com Severity : High Tested on : Firefox, Google Chrome, Internet Explorer Tested Router : Sagem F@st 3304-V2 3304, 3464, 3504 may also be affected Date : 2014-09-04 Author : Yassine Aboukir Contact : [email protected]...
Halon Security Router (SR) 3.2-winter-r1 - Multiple Vulnerabilities
Halon Security Router SR 3.2-winter-r1 - Multiple Vulnerabilities ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia...
SpagoBI 4.0 - Persistent XSS Vulnerability
Exploit for php platform in category web applications 1. Vulnerability Information CVE reference: CVE-2013-6232 CVSS v2 Base Score: 4 CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N Component/s: SpagoBI Class: Input Manipulation 2. Introduction SpagoBI1 is an Open Source Business Intelligence suite,...
ProQuiz V2.x.x => Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title : ProQuiz V2.x.x = Multiple Vulnerabilities Google Dork : "Powered by Softon Technologies" Date : 15/02/2014 Exploit Author : JoKeRStEx Vendor Homepage : http://proquiz.softon.org/ Version : V2.x.x Tested on : Windows CVE : +...
PT-2014-2655
Name of the Vulnerable Software and Affected Versions Belkin Model F5D8236-4 v2 router Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The exact vectors used for the injection ar...
CVE-2013-3084: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Belkin Model F5D8236-4 v2 router allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-7114
Multiple buffer overflows in the createntlmsspv2key function in epan/dissectors/packet-ntlmssp.c in the NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 allow remote attackers to cause a denial of service application crash via a long domain name in a packet...
CVE-2013-7114
Multiple buffer overflows in the createntlmsspv2key function in epan/dissectors/packet-ntlmssp.c in the NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 allow remote attackers to cause a denial of service application crash via a long domain name in a packet...
CVE-2013-7114
Multiple buffer overflows in the createntlmsspv2key function in epan/dissectors/packet-ntlmssp.c in the NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 allow remote attackers to cause a denial of service application crash via a long domain name in a packet...
Updated wireshark packages fix two security vulnerabilities
Updated wireshark packages fix security vulnerabilities: The SIP dissector could go into an infinite loop CVE-2013-7112. The NTLMSSP v2 dissector could crash CVE-2013-7114...
CVE-2013-7114: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in the createntlmsspv2key function in epan/dissectors/packet-ntlmssp.c in the NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 allow remote attackers to cause a denial of service application crash via a long domain name in a packet...
PT-2013-6280
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.11 Wireshark versions 1.10.x through 1.10.3 Description The issue is related to multiple buffer overflows in the create ntlmssp v2 key function in the NTLMSSP v2 dissector. This can be exploited by remote...
Wireshark 1.8.x < 1.8.12 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 1.8.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.12 advisory. - Multiple buffer overflows in the createntlmsspv2key function in epan/dissectors/packet-ntlmssp.c in the NTLMSS...