7195 matches found
CVE-2013-3130
creationtimestamp| type| source ---|---|--- 2013-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25611 2013-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25912 2013-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26554...
CVE-2013-3661
creationtimestamp| type| source ---|---|--- 2013-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25611 2013-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25912 2013-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26554...
Ubuntu: Security Advisory (USN-1822-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM SPSS SamplePower 3.0 < 3.0 FP 1 Multiple ActiveX Controls Arbitrary Code Execution
The remote install of IBM SPSS SamplePower has a vulnerable version of one or more ActiveX controls installed. 'Vsflex8l.ocx', 'c1sizer.ocx', 'vsflex7l .ocx', and 'olch2x32.ocx' ActiveX controls have unspecified arbitrary code execution vulnerabilities, which can be exploited by tricking a user...
Firefox 21 Launches with 3 critical fixes and new Social Integrations
Mozilla has launched Firefox 21 for Mac, Windows, and Linux, adding a number of improvements, namely to the browser's Social API. "Today, we are adding multiple new social providers Cliqz, Mixi and msnNOW to Firefox," wrote Mozilla in a blog post today. The browser first added Facebook integratio...
Mutiny Appliance contains multiple directory traversal vulnerabilities
Overview Mutiny appliance contains multiple directory traversal CWE-22 vulnerabilities. Description The Mutiny appliance commands for UPLOAD, DELETE, CUT and COPY are all vulnerable to directory traversal attacks. Additional details may be found in the Rapid7 blog post entitled, "New 1day Exploit...
Microsoft Patches IE Zero Day Used In Watering Hole Attack
Microsoft wasted no time today delivering a patch for the Internet Explorer 8 vulnerability being exploited in watering hole attacks carried out against the U.S. Department of Labor website and nine others worldwide. Today’s Patch Tuesday security updates also include a fix for IE vulnerabilities...
Microsoft Internet Explorer CVE-2013-1309 Use-After-Free Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
Malicious Firefox, Chrome Extensions Target Facebook Users
Facebook users are being warned of malicious Firefox and Chrome extensions that can give an attacker remote control over a Facebook profile. Microsoft has seen an increase in activity around these extensions, in particular in Brazil. The threat is detected as Trojan:JS/Febipos.A and has been...
Attackers Target Older Java Bugs
It’s no secret that Java has moved to the top of the target list for many attackers. It has all the ingredients they love: ubiquity, cross-platform support and, best of all, lots of vulnerabilities. Malware targeting Java flaws has become a major problem, and new statistics show that this epidemi...
Cool Exploit Kit Includes Old Internet Explorer Exploit
You cannot accuse the keepers of the Cool Exploit Kit of not recognizing market trends. Given a rash of recent watering hole attacks and zero-day exploits built around Microsoft’s Internet Explorer browser, it’s no surprise that a 15-month-old IE exploit has been included in the crimeware package...
CVE-2012-6495
creationtimestamp| type| source ---|---|--- 2013-05-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25304 2013-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26422...
NetApp OnCommand System Manager - zapiServlet CIFS Configuration Management Interface Multiple Cross-Site Scripting Vulnerabilities
NetApp OnCommand System Manager - zapiServlet CIFS Configuration Management Interface Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/59688/info NetApp OnCommand System Manager is prone to multiple cross-site scripting and HTML-injection vulnerabilities...
CVE-2013-3320
creationtimestamp| type| source ---|---|--- 2013-05-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38507 2013-05-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38506...
SEC Consult 20130417-0 :: Multiple vulnerabilities in Sosci Survey
SEC Consult Vulnerability Lab Security Advisory 20130417-0 ======================================================================= title: Multiple vulnerabilities in Sosci Survey product: Sosci Survey vulnerable version: 2.3.04a fixed version: 2.3.04a impact: Critical homepage:...
VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "Scroll" Use-after-free (MS13-028)
VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "Scroll" Use-after-free MS13-028 Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Microsoft Internet Explorer is a web browser developed by Microsoft and included as part of the...
Fraud-as-a-Service of Zeus Malware advertised on social network
Cyber crime enterprise is showing a growing interest in monetization of botnets, the most targeted sector in recent months is banking. One of most active malware that still menaces Banking sector is the popular Zeus. Zeus is one of the oldest, it is active since 2007, and most prolific malware th...
Brad Arkin Named Adobe CSO
Adobe has named Brad Arkin to the newly created position of CSO, a major expansion of responsibilities for Arkin, who has been leading the company’s product security and privacy initiatives. Adobe has been in the security spotlight for several years now, as attackers have focused their attention ...
Oracle Delays Java 8 Features for Security Overhaul
It’s not quite the development freeze Microsoft underwent during the Trustworthy Computing push, but it’s a start for Oracle, which will delay the release of Java 8 until Q1 of next year, largely because the platform and browser plug-in is such a security disaster. This year has done nothing but...
SuSE 10 Security Update : IBM Java (ZYPP Patch Number 8542)
IBM Java 5 has been updated to SR16 FP1 which bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ and on : http://www.ibm.com/developerworks/java/jdk/aix/j564/fixes.htmlSR16FP1 CVEs fixed: CVE-2013-0485 / CVE-2013-0809 / CVE-2013-1493...