CVE-2014-3540

CVE-2014-3540 is a duplicate of CVE-2014-0114. The connected advisories describe a remote code execution flaw in Apache Struts 1.x (1.x through 1.3.10) where an attacker can manipulate the ClassLoader via the class parameter passed to getClass, enabling arbitrary code execution. Remediation cente...

CRYPTOCard CRYPTOAdmin 4.1 Weak Encryption Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1097/info CRYPTOCard CRYPTOAdmin is a network authentication application for use with the Palm OS platform. CRYPTOAdmin generates a .pdb file which contains the username, PIN number, serial number, and key in encrypted or...

CVE-2014-2750

CVE-2014-2750 entry is rejected/not used and does not represent an active vulnerability.

UBUNTU-CVE-2014-2673

The archduptaskstruct function in the Transactional Memory TM implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact with the clone and fork system calls, which allows local users to cause a denial of service Program...

CVE-2013-6405

CVE-2013-6405 is rejected/not used and does not represent an active vulnerability entry.

libjpeg: information leak (read of uninitialized memory)

The getsos function in jdmarker.c in 1 libjpeg 6b and 2 libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan SOS JPEG markers,...

L3 CPU shared cache architecture is susceptible to a Flush+Reload side-channel attack

Overview L3 CPU shared cache architecture is susceptible to a Flush+Reload side-channel attack, resulting in information leakage. allowing a local attacker to derive the contents of memory not belonging to the attacker. Description Common L3 CPU shared cache architecture is susceptible to a...

CVE-2013-4266

CVE-2013-5123 affects Python pip prior to 1.5, where the mirroring support (-M, --use-mirrors) performs insecure DNS querying and lacks proper authentication checks, enabling potential man-in-the-middle attacks to download software over insecure links. Multiple connected sources (NVD entries and ...

[360-FAAR v0.4.1] Firewall Analysis Audit And Repair

360-FAAR Firewall Analysis Audit and Repair is an offline, command line, Perl firewall policy manipulation tool to filter, compare to logs, merge, translate and output firewall commands for new policies, in Checkpoint dbedit, Cisco ASA or ScreenOS commands, and its one file! Changes: This release...

CVE-2012-6138

CVE-2012-6138 is rejected and not used; refer to duplicate CVEs (e.g., CVE-2012-6536..6549).

CVE-2012-5593

Wireshark 1.8.x before 1.8.4 is affected by CVE-2012-5593 (USB dissector DoS). The USB dissector in epan/dissectors/packet-usb.c can loop indefinitely when processing crafted data, leading to denial of service. Vendors openSUSE SUSE-SU-2013:0238-1 and openSUSE/SUSE advisories list CVE-2012-5593 a...

CVE-2012-3379

This CVE-2012-3379 entry is rejected/not used; reference CVE-2012-0808 instead.

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

CVE-2005-4881 kernel: netlink: fix numerous padding memleaks CVE-2009-3228 kernel: tc: uninitialised kernel memory leak This update fixes the following security issues : - multiple, missing initialization flaws were found in the Linux kernel. Padding data in several core network structures was no...

Mozilla Firefox 13.x < 13 Multiple Vulnerabilities

Binary data 801282.prm...

Mozilla Thunderbird < 14.0 Multiple Vulnerabilities

Binary data 6520.prm...

X-Frame-Options header ignored when duplicated — Mozilla

Bugzilla developer Frédéric Buclin reported that the "X-Frame-Options header is ignored when the value is duplicated, for example X-Frame-Options: SAMEORIGIN, SAMEORIGIN. This duplication occurs for unknown reasons on some websites and when it occurs results in Mozilla browsers not being protecte...

CVE-2012-2732

CVE-2012-2732 is a duplicate of CVE-2010-2021 . The open redirect vulnerability affects the Drupal contributed module Global Redirect (versions 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 ). When the module’s non-clean to clean redirect is enabled, remote attackers can cause users to be red...

duplicates NSE Script

Attempts to discover multihomed systems by analysing and comparing information collected by other scripts. The information analyzed currently includes, SSL certificates, SSH host keys, MAC addresses, and Netbios server names. In order for the script to be able to analyze the data it has...

Windows Escalation

This module uses the getsystem command to escalate the current session to the SYSTEM account using various techniques. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasm' class MetasploitModule 'Windows...

CentOS Update for kernel CESA-2009:1522 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...