Corel Quattro Pro X6 Standard Edition NULL Pointer Dereference

Advisory ID: HTB23112 Product: Corel Quattro Pro X6 Standard Edition Vendor: Corel Corporation Vulnerable Versions: 16.0.0.388, other versions may be also affected Tested Version: 16.0.0.388 on Windows 7 SP1 32 bits Vendor Notification: August 27, 2012 Public Disclosure: March 7, 2013 Vulnerabili...

Corel WordPerfect X6 Standard Edition Untrusted Pointer Dereference

Advisory ID: HTB23114 Product: Corel WordPerfect X6 Standard Edition Vendor: Corel Corporation Vulnerable Versions: 16.0.0.388, other versions may be also affected Tested Version: 16.0.0.388 on Windows 7 SP1 32 bits Vendor Notification: September 12, 2012 Public Disclosure: March 7, 2013...

Service Disruption or Destruction: Which is Worse?

Outcomes in security tend to be about data loss; stolen pharmaceutical formulas, jet fighter blueprints, patient records, credit card numbers etc. All of these come with a great cost to the victim and make for sexy headlines. But far too little is dissected and analyzed about service disruptions...

CentOS Update for gnome-vfs2 CESA-2013:0131 centos5

Check for the Version of gnome-vfs2 OpenVAS Vulnerability Test CentOS Update for gnome-vfs2 CESA-2013:0131 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

DSA-2581-1 mysql-5.1 - several

Bulletin has no description...

CoSoSys Endpoint Protector Detection

The remote web server hosts CoSoSys Endpoint Protector, a web-based data loss prevention application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62941; scriptversion"1.7"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"CoSoSys Endpoint Protector Detection";...

Stolen NASA Laptop Puts 'Large Number' of Employees at Risk

NASA has enacted new policies to protect employee and other sensitive information after a laptop was stolen from an employee’s locked vehicle, exposing records of personal information on a “large number” of NASA employees. The laptop was not protected by whole disk encryption, NASA officials said...

South Carolina Data Breach Casts Spotlight on Lack of Encryption, Stolen Credentials

South Carolina governor Nikki Haley said a mouthful this week when she spilled a dirty industry secret that Social Security numbers are generally not encrypted by state agencies. Reeling from a Department of Revenue data breach that leaked 3.6 million Social Security and credit card numbers as we...

Allscripts Homecare Client Local Memory Corruption

Title: Allscripts Homecare Client Local Memory Corruption tableinfo.ff2 Date: 10/25/12 Author: G13 Software Link: http://www.allscripts.com/en/solutions/post-acute-solutions/homecare/show/overview.html Version: 6.1.0, 7.0.1 Category: Application local Tested on: Windows 7 Pro 64 Bit dc585...

Untrusted Pointer Dereference Vulnerability in Corel WordPerfect X6

High-Tech Bridge Security Research Lab discovered an untrusted pointer dereference vulnerability in Corel WordPerfect. Opening of a malicious WPD WordPerfect Document causes immediate application crash, resulting in a loss of all unsaved current application data of the user. 1 Untrusted Pointer...

CVE-2009-5117

The Web Post Protection feature in McAfee Host Data Loss Prevention DLP 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files...

CVE-2009-5117

The Web Post Protection feature in McAfee Host Data Loss Prevention DLP 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files...

CVE-2009-5117

The CVE-2009-5117 entry concerns McAfee Host Data Loss Prevention (DLP) with its Web Post Protection feature. Versions 3.x prior to 3.0.100.10 and 9.x prior to 9.0.0.422, when HTTP Capture mode is enabled, may let local users obtain sensitive information from web traffic by reading unspecified fi...

Debian Security Advisory DSA 2496-1 (mysql-5.1)

The remote host is missing an update to mysql-5.1 announced via advisory DSA 2496-1. OpenVAS Vulnerability Test $Id: deb24961.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2496-1 mysql-5.1 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Barracuda EMail Security 2.0.2 Filter Bypass / XSS

Title: ====== Barracuda EMail Security 2.0.2 - Multiple Web Vulnerabilities Date: ===== 2012-08-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=621 http://www.vulnerability-lab.com/getcontent.php?id=630 Barracuda Networks Security ID: BNSEC-304 VL-ID: ===== 621 Commo...

Scientific Linux Security Update : openoffice.org on SL6.x i386/x86_64

An array index error and an integer signedness error were found in the way OpenOffice.org parsed certain Rich Text Format RTF files. An attacker could use these flaws to create a specially crafted RTF file that, when opened, would cause OpenOffice.org to crash or, possibly, execute arbitrary code...

GLSA-201206-31 : Linux-PAM: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-31 Linux-PAM: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Linux-PAM. Please review the CVE identifiers referenced below for details. Impact : A local attacker could use specially crafted files ...

Symantec Web Gateway access_log PHP Injection

Added: 06/11/2012 CVE: CVE-2012-0297 BID: 53444 OSVDB: 82023 Background Symantec Web Gateway protects organizations against multiple types of Web-based malware and prevents data loss over the Web. Problem Symantec Web Gateway fails to properly sanitize user-supplied input passed to...

Debian Security Advisory DSA 2429-1 (mysql-5.1)

The remote host is missing an update to mysql-5.1 announced via advisory DSA 2429-1. OpenVAS Vulnerability Test $Id: deb24291.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2429-1 mysql-5.1 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Seditio 170 Cross Site Request Forgery / SQL Injection

============================================================ Vulnerable Software: Seditio 170 seditio-build170.20120302 Downloaded from:http://www.neocrome.net/files/code/seditio-build170.20120302.rar MD5 SUM:beb6adc6abb56f947698c1efdbae9430 seditio-build170.20120302.rar...