7254 matches found
Debian DLA-239-1 : cups security update
Two critical vulnerabilities have been found in the CUPS printing system : CVE-2015-1158 - Improper Update of Reference Count Cupsd uses reference-counted strings with global scope. When parsing a print job request, cupsd over-decrements the reference count for a string from the request. As a...
[SECURITY] [DLA 239-1] cups security update
Package : cups Version : 1.4.4-7+squeeze8 CVE ID : CVE-2015-1158 CVE-2015-1159 Two critical vulnerabilities have been found in the CUPS printing system: CVE-2015-1158 - Improper Update of Reference Count Cupsd uses reference-counted strings with global scope. When parsing a print job request, cup...
DLA-239-1 cups - security update
Bulletin has no description...
SUSE SLED11 / SLES11 Security Update : kernel (SUSE-SU-2014:0189-1)
The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to 3.0.101 and also includes various other bug and security fixes. A new feature was added : - supported.conf: marked net/netfilter/xtset as supported bnc851066fate313309 The following security bugs have been fixed : CVE-2013-4587:...
SUSE SLES10 Security Update : ofed (SUSE-SU-2012:1708-1)
This update of ofed fixed multiple issues including security related flaws : - sdp: move histogram allocation from stack to heap bnc706175 - cma: Fix crash in request handlers bnc678795, CVE-2011-0695 - rds: set correct msgnamelen bnc773383, CVE-2012-3430 - cm: Bump reference count on cmid before...
Total VMs Count in Infrastructure Overview Report
Challenge The Infrastructure Overview report shows different values between vCenter Servers Virtual Machines and Storage Number of VMs. Cause Here are the possible causes of such behavior: one VM is linked with more than one datastore; for the "vCenter Servers" templates are not counted; "Storage...
Drupal Public Download Count Module Cross-Site Scripting Vulnerability
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the Drupal Public Download Count module. This vulnerability allows attackers to inject arbitrary web script or HTML...
Cross site scripting
Cross-site scripting XSS vulnerability in the Download counts report page in the Public Download Count module pubdlcnt 7.x-1.x-dev and earlier for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-3389
Cross-site scripting XSS vulnerability in the Download counts report page in the Public Download Count module pubdlcnt 7.x-1.x-dev and earlier for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
PT-2015-6209
Name of the Vulnerable Software and Affected Versions Drupal Public Download Count module pubdlcnt versions 7.x-1.x-dev and earlier Description A cross-site scripting XSS issue exists in the Download counts report page, allowing remote authenticated users to inject arbitrary web script or HTML...
CVE-2015-3389: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Download counts report page in the Public Download Count module pubdlcnt 7.x-1.x-dev and earlier for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
openstack-swift: Swift metadata constraints are not correctly enforced
A flaw was found in the metadata constraints in OpenStack Object Storage swift. By adding metadata in several separate calls, a malicious user could bypass the maxmetacount constraint, and store more metadata than allowed by the configuration...
openstack-swift: Swift metadata constraints are not correctly enforced
A flaw was found in the metadata constraints in OpenStack Object Storage swift. By adding metadata in several separate calls, a malicious user could bypass the maxmetacount constraint, and store more metadata than allowed by the configuration...
kernel: ipc: ipc_rcu_putref refcount races
A flaw was found in the way the ipcrcuputref function in the Linux kernel's IPC implementation handled reference counter decrementing. A local, unprivileged user could use this flaw to trigger an Out of Memory OOM condition and, potentially, crash the system...
Vulnerability in the jBCrypt key stretching process
Overview jBCrypt is a Java implementation to compute password hashes. jBCrypt contains an integer overflow vulnerability in the key stretching process. An integer overflow occurs when the parameter for the repetition count is set to the maximum value allowed, 31. Norito AGETSUMA reported this...
SA-CONTRIB-2015-036 - Public Download Count - Cross Site Scripting (XSS) - Unsupported
Public Download Count module keeps track of file download counts. The module doesn't sufficiently sanitize user supplied text in the Download counts report page thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role wit...
PT-2015-4264
Name of the Vulnerable Software and Affected Versions Our Team Showcase our-team-enhanced plugin versions prior to 1.3 for WordPress Description The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to change plugin settings or conduct...
Debian DSA-3099-1 : dbus - security update
Simon McVittie discovered that the fix for CVE-2014-3636 was incorrect, as it did not fully address the underlying denial-of-service vector. This update starts the D-Bus daemon as root initially, so that it can properly raise its file descriptor count. In addition, this update reverts the...
CouchDB: Denial of service
Background Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database. Description CouchDB does not properly sanitize the count parameter for Universally Unique Identifiers UUID requests. Impact A remote attacker could send a specially crafted request to CouchDB,...