Advance Notification Service for August 2013 Security Bulletin Release

Today we’re providing advance notification for the release of eight bulletins, three Critical and five Important, for August 2013. The Critical updates address vulnerabilities in Microsoft Windows, Internet Explorer and Exchange. As usual, we’ve scheduled the bulletin release for the second Tuesd...

Fedora Update for fontmatrix FEDORA-2013-13479

Check for the Version of fontmatrix OpenVAS Vulnerability Test Fedora Update for fontmatrix FEDORA-2013-13479 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for icu FEDORA-2013-13479

Check for the Version of icu OpenVAS Vulnerability Test Fedora Update for icu FEDORA-2013-13479 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Firefox onreadystatechange Event DocumentViewerImpl Use After Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Firefox...

CVE-2013-5028

creationtimestamp| type| source ---|---|--- 2013-08-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38691...

CVE-2013-2653

creationtimestamp| type| source ---|---|--- 2013-08-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38689...

Mozilla Thunderbird Multiple Vulnerabilities (Aug 2012) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

July 2013 Security Bulletin Webcast, Q&A, and Slide Deck

Today we’re publishing the July 2013 Security Bulletin Webcast Questions & Answers page. During the webcast, we fielded 10 questions covering all updates. All questions are included on the Q&A page. We invite our customers to join us for the next scheduled webcast on Wednesday, August 14th at 11...

Firefox onreadystatechange Event DocumentViewerImpl Use After Free

This module exploits a vulnerability found on Firefox 17.0.6, specifically a use after free of a DocumentViewerImpl object, triggered via a specially crafted web page using onreadystatechange events and the window.stop API, as exploited in the wild on 2013 August to target Tor Browser users. Modu...

SysAid Helpdesk 8.5 Pro SQL Injection

======= Summary ======= Name: SysAid Helpdesk Pro - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00241 Discoverer: Daniel Compton Vendor: SysAid Vendor Reference: Systems Affected: SysAid Helpdesk 8.5 Pro Risk: High Status: Published ======== TimeLine ======== Discovered: 12...

Conceptronic GrabnGo Network Storage - Directory Traversal

Conceptronic GrabnGo Network Storage - Directory Traversal Security Advisory AA-003: Directory Traversal Vulnerability in Conceptronic Grab’n’Go Network Storage Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 3, 2012 Vulnerability...

Mozilla Products Memory Corruption Vulnerabilities - August12 (Mac OS X)

This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmemcorrvulnaug12macosx.nasl 6445 2017-06-27 12:31:06Z santu $ Mozilla Products Memory Corruption Vulnerabilities - August12 Mac OS X Authors:...

AB Banner Exchange - index.php Local File Inclusion

AB Banner Exchange - index.php Local File Inclusion ----------------------------------------------------------- AB Banner Exchange index.php page Local file inclusion Bug discovered by Yakir Wizman Date 24/08/2012 Vendor Homepage - http://www.abscripts.com/ab-banner-exchange/ Demo -...

MS12-057: Vulnerabilities in Microsoft Office could allow for remote code execution: August 14, 2012

Resolves vulnerabilities in Microsoft Office could allow for remote code execution. This security update was released on August 14, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-057. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

MS12-057: Description of the security update for 2007 Office system (MSO): August 14, 2012

Describes the security update for 2007 Office system MSO, that was released on September 14, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-057. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

MS12-056: Vulnerability in JScript and VBScript engines could allow remote code execution: August 14, 2012

None None...

MS12-054: Description of the security update for Windows Networking Components: August 14, 2012

None None...

MS12-054: Description of the security update for Windows Networking Components: August 14, 2012

None None...

MS12-057: Description of the security update for Office 2010 (MSO): August 14, 2012

Describes the security update for Office 2010 MSO that was released on August 14, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-057. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

DDIVRT-2011-35 Cisco Unified Contact Center Express Directory Traversal [CVE-2011-3315]

Title ----- DDIVRT-2011-35 Cisco Unified Contact Center Express Directory Traversal CVE-2011-3315 Severity -------- High Date Discovered --------------- August 9, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: r@b13$ Vulnerability Description...