CVE-2015-6576: Deserialisation Resulting in Remote Code Execution Vulnerability

Bamboo had a resource that deserialised arbitrary user input without restriction. Attackers can use this vulnerability to execute Java code of their choice on systems that have a vulnerable version of Bamboo. To exploit this issue, attackers need to be able to access the Bamboo web interface...

Trimble® Infrastructure GNSS Series Receivers Cross Site Scripting (XSS) vulnerability

Trimble® Infrastructure GNSS Series Receivers Cross Site Scripting XSS vulnerability: - CVE: CVE-2012-5053 - Deloitte Argentina Advisory Code: DTTAR-20130001 - Vendor Status: CONFIRMED - Public Disclosure Date: January, 15th, 2013. - Vendors Affected: Trimble - http://www.trimble.com/ - Systems...

Polycom® HDX® Video End Points Web Management Cross Site Scripting (XSS) vulnerability

Polycom® HDX® Video End Points Web Management Cross Site Scripting XSS vulnerability: - CVE: CVE-2012-4970 - Deloitte Argentina Advisory Code: DTTAR-20120001 - Vendor Status: CONFIRMED - Public Disclosure Date: December, 23rd, 2012. - Vendors Affected: Polycom - http://www.polycom.com/ - Systems...

Mandrake Linux Security Advisory : koffice (MDKSA-2004:165)

Chris Evans discovered numerous vulnerabilities in the xpdf package, which also effect software using embedded xpdf code, such as koffice CVE-2004-0888. Multiple integer overflow issues affecting xpdf-2.0 and xpdf-3.0. Also programs like koffice which have embedded versions of xpdf. These can...

[SECURITY] [DSA-062-1] rxvt buffer overflow

Package : rxvt Problem type : buffer overflow Debian-specific: no Samuel Dralet reported on bugtraq that version 2.6.2 of rxvt a VT102 terminal emulator for X have a buffer overflow in the ttprintf function. A local user could abuse this making rxvt print a special string using that function, for...

VIGILANTE-2000013.txt

WinCOM LPD DoS Advisory Code: VIGILANTE-2000013 Release Date: September 19, 2000 Systems Affected: - WinCOM LPD V1.00.90 for Windows NT THE PROBLEM A continuos stream of LPD options, sent to the LPD port default TCP port 515 on the host running WinCOM, will eventually consume all the memory on th...

netscape.netware.txt

Netscape Enterprise Server for NetWare Virtual Directory Vulnerability Advisory Code: VIGILANTE-2000001 Release Date: June 26, 2000 Systems Affected: NetWare 5.1 prior to support pack 1 NetWare 5.0 - all support packs Possibly older versions of NetWare as well not tested THE PROBLEM By issuing a...

Netscape Enterprise Server for NetWare Virtual Directory Vulnerab ility

Netscape Enterprise Server for NetWare Virtual Directory Vulnerability Advisory Code: VIGILANTE-2000001 Release Date: June 26, 2000 Systems Affected: NetWare 5.1 prior to support pack 1 NetWare 5.0 - all support packs Possibly older versions of NetWare as well not tested THE PROBLEM By issuing a...