3608 matches found
SOL15318 - OpenSSL vulnerability CVE-2011-3207
Note: LineRate uses the specified vulnerable OpenSSL version, but CRL validation is not enabled, so the product is not vulnerable. Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed ...
SA-CONTRIB-2014-053 - Field API Tab Editor (FATE) - Access bypass
This module allows each entity field to be individually edited via its own custom page, accessible via a tab on the entity's page. The module returns an incorrect value to hookmenu if the current user does not have access to edit the entity. This allows users who would not normally have access to...
CVE-2011-3634
methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Host is enabled, which allows man-in-the-middle attackers to obtain repository credentials via unspecified vectors...
KLA10277 LPE vulnerability in Norman Security Suite
An unspecified vulnerability was found in the Norman Security Suite. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products Norman-Security-Suite CVE list CVE-2014-0816 high...
MGASA-2014-0068 Updated perl-Capture-Tiny package fixes security vulnerability
perl-Capture-Tiny before 0.24 used files in /tmp in an insecure manner CVE-2014-1875...
Important: Red Hat Security Advisory: Apache Camel security update
An update for the Apache Camel component that fixes one security issue is now available from the Red Hat Customer Portal for Red Hat JBoss BRMS 6.0.0, and Red Hat JBoss BPMS 6.0.0. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability...
Java-Bot, a Cross-platform malware launching DDoS attacks from infected computers
These days botnets are all over the news. In simple terms, a botnet is a group of computers networked together, running a piece of malicious software that allows them to be controlled by a remote attacker. A major target for most of the malware is still Windows, but the growing market of Mac OS X...
Debian Security Advisory DSA 2823-1 (pixman - integer underflow)
Bryan Quigley discovered an integer underflow in Pixman which could lead to denial of service or the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2823.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2823-1 using nvtgen 1.0 Script version: 1.0 Author:...
Fedora Update for kernel FEDORA-2013-12530
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-12530 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
MGASA-2013-0206 Updated php-radius packages fix CVE-2013-2220
Updated php-radius package fixes security vulnerability: Fix a security issue in radiusgetvendorattr by enforcing checks of the VSA length field against the buffer size CVE-2013-2220...
MGASA-2013-0184 Updated perl-Module-Signature package fixes CVE-2013-2145
Arbitrary code execution vulnerability in Module::Signature before 0.72 CVE-2013-2145...
MGASA-2013-0179 apache-mod_security new security issue CVE-2013-2765
Updated apache-modsecurity packages fix security vulnerability: When ModSecurity receives a request body with a size bigger than the value set by the "SecRequestBodyInMemoryLimit" and with a "Content-Type" that has no request body processor mapped to it, ModSecurity will systematically crash on...
Fedora Update for kbreakout FEDORA-2013-10130
Check for the Version of kbreakout OpenVAS Vulnerability Test Fedora Update for kbreakout FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
SA-CONTRIB-2013-048 - Edit Limit - Access Bypass
Edit Limit enables you to set time and count-based limits on how and when a user can edit nodes or comments. The module doesn't sufficiently check user access when editing comments to see if the user has the necessary permissions to edit a comment outside of the limits applied by this module. Thi...
SA-CONTRIB-2013-047 - Google Authenticator login - Access Bypass
This module will allow you to add Time-based One-time Password Algorithm also called "Two Step Authentication" or "Multi-Factor Authentication" support to user logins. It works with Google's Authenticator app system and support most if not all OATH based HOTP/TOTP systems. Accidental removal of...
CVE-2008-0089
creationtimestamp| type| source ---|---|--- 2013-03-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24894...
CVE-2011-1164
Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier for remote attackers to perform attacks...
GreenBrowser iframe Handling Double Free Vulnerability (Windows)
This host is installed with GreenBrowser and is prone to double free vulnerability. OpenVAS Vulnerability Test $Id: gbgreenbrowserdoublefreevulnwin.nasl 6022 2017-04-25 12:51:04Z teissa $ GreenBrowser iframe Handling Double Free Vulnerability Windows Authors: Rachana Shetty Copyright: Copyright c...
Fedora 17 : perl-HTML-Template-Pro-0.9509-1.fc17 (2012-15490)
This version of HTML::Template::Pro fixes a cross-site scripting XSS vulnerability in the module. http://www.openwall.com/lists/oss-security/2011/12/19/1 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587 https://vulners.com/cve/CVE-2011-4616 Note that Tenable Network Security has extracted...
Slackware: Security Advisory (SSA:2006-195-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...