Deserialization of untrusted data

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted 1 update or 2 reprogramming action...

Design/Logic Flaw

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388...

CVE-2013-2819

The Sierra Wireless AirLink Raven X EV-DO gateway (versions V4221_4.0.11.003 and V4228_4.0.11.003) is affected by CVE-2013-2819 due to missing encryption of the update/reprogramming process and use of plain text credentials, enabling remote firmware reprogramming and potential denial of service. ...

CVE-2013-2820

CVE-2013-2820 affects Sierra Wireless AirLink Raven X EV-DO gateways (firmware versions V4221_4.0.11.003 and V4228_4.0.11.003). The vulnerability allows remote replay attacks that reprogram the device firmware via UDP ports 17336 and 17388, potentially impacting availability and function. ICS-CER...

CVE-2013-2819

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted 1 update or 2 reprogramming action...

CVE-2013-2820: Improper Authentication

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388...

CVE-2013-2819: Undefined Security Weakness

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted 1 update or 2 reprogramming action...

Mozilla Thunderbird Multiple Vulnerabilities-01 (Dec 2013) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Ubuntu Update for thunderbird USN-2053-1

Check for the Version of thunderbird OpenVAS Vulnerability Test $Id: gbubuntuUSN20531.nasl 8483 2018-01-22 06:58:04Z teissa $ Ubuntu Update for thunderbird USN-2053-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu: Security Advisory (USN-2053-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : thunderbird vulnerabilities (USN-2053-1)

Ben Turner, Bobby Holley, Jesse Ruderman and Christian Holler discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause a denial of service via application...

USN-2053-1: Thunderbird vulnerabilities

Ben Turner, Bobby Holley, Jesse Ruderman and Christian Holler discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause a denial of service via application...

CVE-2013-6673

Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a...

Firefox ESR 24.x < 24.2 Multiple Vulnerabilities

The installed version of Firefox ESR 24.x is earlier than 24.2, and is, therefore, potentially affected by the following vulnerabilities : - Memory issues exist in the browser engine that could result in a denial of service or arbitrary code execution. CVE-2013-5609, CVE-2013-5610 - Two...

CVE-2013-6673: Undefined Security Weakness

Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a...

Firefox 26 Makes Java Plugins Click-to-Play, Fixes 14 Security Flaws

Mozilla has released a major new version of Firefox, which includes fixes for more than a dozen security vulnerabilities as well as an important change that makes all Java plugins click-to-play be default. This feature prevents those plugins from running automatically on Web pages, which helps...

Trust settings for built-in roots ignored during EV certificate validation — Mozilla

Firefox user Sijie Xia reported that if a user explicitly removes the trust for extended validation EV capable root certificates in the certificate manager, the change is not properly used when validating EV certificates, causing the setting to be ignored. This removes the ability of users to...

phpVibe 3.1 Disclosure / Remote File Inclusion

Exploit Title: phpVibe 3.1 Multiple Vulnerability Date: 2013-05-07 Author: indoushka Software Link: http://phprevolution.com/ Category: webapps/php Version: 3.1 Price: 40€ Google dork: "Powered by phpVibe v3.1" installation Application error message :...

CVE-2013-1609

Symantec Enterprise Vault (EV) for File System Archiving contains multiple unquoted Windows search path vulnerabilities in the File Collector and File PlaceHolder services. This flaw affects versions before 9.0.4 and 10.x before 10.0.1 . A local attacker can exploit these paths to gain elevated p...

CVE-2013-1609

Multiple unquoted Windows search path vulnerabilities in the 1 File Collector and 2 File PlaceHolder services in Symantec Enterprise Vault EV for File System Archiving before 9.0.4 and 10.x before 10.0.1 allow local users to gain privileges via a Trojan horse program...