1336 matches found
GetSimple CMS 2.01 and 2.02 Administrative Credentials Disclosure
No description provided by source. Researcher: Michael Brooks Affecting: GetSimple CMS 2.01 and 2.02 Fixed:2.03 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://code.google.com/p/get-simple-cms download url for 2.01: http://www.box.net/get-simple/1/30435008/399754548...
ISC BIND 9 EDNS Processing DoS
According to its self-reported version number, the remote installation of BIND is affected by a denial of service vulnerability. The issue exists due to an error in 'libdns' that fails to properly handle Extension Mechanisms for DNS EDNS options. Note that Nessus has not tested for this issue but...
IBM WebSphere Application Server 8.5 < Fix Pack 8.5.5.2 Multiple Vulnerabilities
IBM WebSphere Application Server 8.5 prior to Fix Pack 8.5.5.2 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities : - Numerous errors exist related to the included IBM SDK for Java based on the Oracle JDK that could allow denial of...
CVE-2013-7366
The SAP Software Deployment Manager SDM, in certain unspecified conditions, allows remote attackers to cause a denial of service via vectors related to failed authentications...
Cross site scripting
Cross-site scripting XSS vulnerability in the web interface on Huawei Echo Life HG8247 routers with software before V100R006C00SPC127 allows remote attackers to inject arbitrary web script or HTML via an invalid TELNET connection attempt with a crafted username that is not properly handled during...
Security changes in Opera 20 update
Security Security changes in Opera 20 update Share March 13th, 2014 We have just released a silent update of Opera 20, you would most likely not even have noticed. From a security perspective, we have made two interesting changes in this update. The first one regards what we call the badge, the...
Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on February 17, 2014
Medium Alert ID: 32895 First Published: 2014 February 17 21:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed delivery notification for the recipient. The text in the email message attempts to convince the...
DEBIAN-CVE-2011-5268
connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service file descriptor consumption and crash via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 becaus...
CVE-2013-5440
IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation...
Information disclosure
IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation...
CVE-2013-5440
IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation...
Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on May 6, 2015
Medium Alert ID: 31863 First Published: 2013 November 21 20:35 GMT Last Updated: 2015 May 7 12:18 GMT Version: 80 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed delivery notification for the recipient. The te...
Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on November 5, 2013
Medium Alert ID: 31637 First Published: 2013 November 5 19:25 GMT Last Updated: 2013 November 6 15:52 GMT Version: 2 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed delivery notification for the recipient. The...
CVE-2013-4434
Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames...
Scientific Linux Security Update : ccid on SL5.x i386/x86_64 (20130930)
An integer overflow, leading to an array index error, was found in the way the CCID driver processed a smart card's serial number. A local attacker could use this flaw to execute arbitrary code with the privileges of the user running the PC/SC Lite pcscd daemon root, by default, by inserting a...
Force password reset for all users
Administrators should have an easy way to force users to change passwords in bulk format in emergencies. Has this been discussed as a possible feature? Are there drawbacks to having a mass password reset force in administration? Would setting password expiration to 1 day expire all passwords in 2...
Oracle Linux 5 : ImageMagick (ELSA-2012-0301)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0301 advisory. - Add fix for CVE-2010-4167 767142 Fix assertion failed when using 'identify -verbose' when theres no image information available 502626 Fix memory allocation...
Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2013-0958)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0958 advisory. 1.7.0.25-2.3.10.4.0.1.el59 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Enterprise Linux' 1.7.0.25-2.3.10.4.el5 - updated to newer IcedTea7-fores...
PHP file include vulnerability details(including the truncated method)-vulnerability warning-the black bar safety net
One, what is”remote file inclusion vulnerability”for? The answer is: the server through the php properties of a function to contain any files, since you want to include this file source filter is not strict, so can go to that contains a malicious file and we can construct the malicious file to...