CVE-2015-3205: Improper Neutralization of Special Elements in Output Used by a Downstream Component

libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file, related to "free" function calls in the "lexer's memory clean-up procedure."...

Libmimedir VCF Memory Corruption PoC

Libmimedir suffers from a memory corruption vulnerability. Adding two NULL bytes to the end of a VCF file allows a user to manipulate free calls which occur during it's lexer's memory clean-up procedure. This could lead to exploitable conditions such as crafting a specific memory chunk to allow f...

[SECURITY] Fedora 22 Update: python-django-1.8.2-1.fc22

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

CVE-2014-9209: Undefined Security Weakness

Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

Possible Trojan Horse Detection (Known Service Banner Based)

Look for potential trojan horses based on known service banner responses. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ipa security, bug fix, and enhancement update

4.1.0-18.0.1 - Replace login-screen-logo.png 20362818 - Drop subscription-manager requires for OL7 - Drop redhat-access-plugin-ipa requires for OL7 - Blank out header-logo.png product-name.png 4.1.0-18 - Fix ipa-pwd-extop global configuration caching 1187342 - group-detach does not add correct...

[SECURITY] Fedora 21 Update: python-django-1.6.10-1.fc21

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

Data loss risk with Backup Copy to Data Domain via DDBoost

Challenge Backup Copy job retention processing overlapping with the DD Clean process garbage collection may result in data loss. Cause Backup Copy job retention processing overlapping with the DD Clean process garbage collection may result in data loss due to Data Domain erroneously processing fi...

CVE-2014-8955

The CVE-2014-8955 entry describes a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Contact Form Clean and Simple” (also listed as clean-and-simple-contact-form-by-meg-nicholas) versions 4.4.0 and earlier. The issue arises from improper handling of the cscf[name] parameter submi...

CVE-2014-8955

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

CVE-2014-8955: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

Contact Form Clean & Simple <= 4.4.0 - Cross-Site Scripting (XSS)

The Contact Form Clean and Simple WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Information disclosure

The Clean Internet Browser aka com.cleantab.browsesecure application 1.36 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4905

The CVE-2014-4905 entry affects The Clean Internet Browser (com.cleantab.browsesecure) for Android, version 1.36. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a cra...

CVE-2014-4905

The Clean Internet Browser aka com.cleantab.browsesecure application 1.36 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4905: Undefined Security Weakness

The Clean Internet Browser aka com.cleantab.browsesecure application 1.36 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

[SECURITY] Fedora 20 Update: python-django15-1.5.9-1.fc20

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 20 Update: python-django-1.6.6-1.fc20

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

CVE-2014-5823

CVE-2014-5823 concerns The Cleaner - Speed up & Clean (com.liquidum.thecleaner) for Android v1.4.2, where SSL servers are not verified against X.509 certificates. This models a classic MITM risk: an attacker could spoof a trusted server and read or alter sensitive data transmitted over TLS. The c...

CVE-2014-5823: Undefined Security Weakness

The The Cleaner - Speed up & Clean aka com.liquidum.thecleaner application 1.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...