[SECURITY] Fedora 21 Update: teeworlds-0.6.3-1.fc21

The game features cartoon-themed graphics and physics, and relies heavily on classic shooter weaponry and gameplay. The controls are heavily inspired by the FPS genre of computer games...

[SECURITY] Fedora 20 Update: teeworlds-0.6.3-1.fc20

The game features cartoon-themed graphics and physics, and relies heavily on classic shooter weaponry and gameplay. The controls are heavily inspired by the FPS genre of computer games...

RHEL 6 : rhev-hypervisor6 (RHSA-2012:0109)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0109 advisory. The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization...

CVE-2014-4766

CVE-2014-4766 affects IBM Sametime Classic Meeting Server 8.0.x and 8.5.x. A remote attacker can read an exported Record and Playback (RAP) file to obtain sensitive information. The CVSSv2 base score is 5.0 (Medium) with network access and low attack complexity; no authentication required and no ...

Information disclosure

The Classic Car Buyer aka com.magazinecloner.carbuyer application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7649

The CVE-2014-7649 entry concerns the Android app The Classic Car Buyer (com.magazinecloner.carbuyer) @7F08017A. It states that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ...

CVE-2014-7535

The Classic Racer aka com.triactivemedia.classicracer application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7535

The CVE-2014-7535 entry concerns the Android app Classic Racer (com.triactivemedia.classicracer). The root issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The descri...

CVE-2014-7344

The Classic Arms & Militaria aka com.magazinecloner.classicarmsandm application @7F080193 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7344

CVE-2014-7344 affects the Android app Classic Arms & Militaria (package com.magazinecloner.classicarmsandm). The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

DLA-60-1 icinga - security update

Bulletin has no description...

IBM Sametime Classic Meeting Server 8.x - 8.5.2.1 Multiple Vulnerabilities - Active Check

IBM Sametime Classic Meeting Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Classic 1.5 - PHP_SELF XSS

The Classic WordPress theme was affected by a PHPSELF XSS security vulnerability...

Cross site scripting

Cross-site scripting XSS vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-4748

CVE-2014-4748 is an XSS vulnerability in the IBM Sametime Classic Meeting Server (8.x up to 8.5.2.1). The issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL, enabling client-side script execution. The NVD entry reports a CVSSv2 base score of 4.3 (MEDIUM) with a...

EzPub Simple Classic ASP CMS SQL Injection Vulnerability

No description provided by source. Title: EzPub - Simple Classic ASP CMS Vulnerable to SQL Injection Vendor: http://www.soft4web.ro Found by: p0pc0rn 08/03/2011 Dork: intext:Powered by EZPub SQL - Microsoft JET Database Engine error ------------------------------------------...

Cisco IOS <= 12.0.2 Syslog Crash

No description provided by source. source: http://www.securityfocus.com/bid/675/info Cisco devices running classic IOS are reported prone to a denial of service vulnerability. The issue occurs when a vulnerable device receives and processes a UDP packet on UDP port 514 for syslog. This issue...

NetZip Classic Buffer Overflow Exploit (SEH)

No description provided by source. +Exploit Title: Exploit Buffer Overflow NetZip ClassicSEH +Date: 01\30\2011 +Author: C4SS!0 G0M3S +Software Link: http://proforma.real.com/real/nzclassic/nzclassic.html +Version: 7.5.1.86 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A The structure of the...

microsoft iis 6.0 and 7.5 - Multiple Vulnerabilities

No description provided by source. THIS IS A GENUINE ISOWAREZ RELEASE ------------------------------------------------------------------------------------------------------------------------------------------------------------ Title: Microsoft IIS 6.0 with PHP installed Authentication Bypass...

Microsoft Internet Explorer 5 Classic Mode FTP Client Cross Domain Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7810/info The Microsoft Internet Explorer FTP indexing implementation could allow script code to be executed in the security zone of another FTP site. This vulnerability only exists when Internet Explorer FTP is used in...