[SECURITY] [DSA 3196-1] file security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3196-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 18, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 131-1] file security update

Package : file Version : 5.04-5+squeeze9 CVE ID : CVE-2014-8116 CVE-2014-8117 Debian Bug : 773148 Multiple security issues have been found in file, a tool/library to determine a file type. Processing a malformed file could result in denial of service. Most of the changes are related to parsing EL...

DLA-131-1 file - security update

Bulletin has no description...

Low: Red Hat Security Advisory: openstack-trove security update

Updated openstack-trove packages that fix two security issues are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores,...

[SECURITY] [DLA 86-1] file security update

Package : file Version : 5.04-5+squeeze8 CVE ID : CVE-2014-3710 Debian Bug : 768806 Francisco Alonso of Red Hat Product Security found an issue in the file utility: when checking ELF files, note headers are incorrectly checked, thus potentially allowing attackers to cause a denial of service...

DLA-50-1 file - security update

Bulletin has no description...

DSA-3021-1 file - security update

Bulletin has no description...

TinyShop 多处SQL注入漏洞

简要描述： 只看了2个文件。官网测试成功。 详细说明： protected\controllers\simple.php 1 public function orderinfo $id = Filter::intReq::args'id'; $productid = Req::args'pid'; $type = Req::args"type"; if$this-checkOnline if$type=='groupbuy' $model = new Model"groupbuy as gb"; $item = $model-join"left join goods as go on...

CVE-2014-3431

Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors...

IRCCloud: Bug in iOS application which could lead to unauthorised access.

Hi, The file under the Preferences folder within the iOS application stores sensitive information: com.irccloud.IRCCloud.plist. This file stores the user's authenticated session identifier. Stealing this information would allow unauthorised access to a user's account. The content of the file can ...

CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs

Heap-based buffer overflow in the yamlparserscanuriescapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file...

CVE-2013-4522

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy...

Shop7z online shopping system v1. 4 vulnerability-vulnerability warning-the black bar safety net

File dataname. asp pathback=LCaserequest. servervariables"QUERYSTRING" if instrpathback,"insert"0 or instrpathback,"update"0 or instrpathback,"delete"0 or instrpathback,""0 or instrpathback,"'"0 or instrpathback," or "0 or instrpathback,"replace"0 or instrpathback,"eval"0 then response. write...

Hide Photo+Video Safe v1.6 iOS - Multiple Vulnerabilities

Document Title: =============== Hide Photo+Video Safe v1.6 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1083 Release Date: ============= 2013-09-21 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2013-1439

The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service NULL pointer dereference via a crafted photo file...

Local file exposure on Windows installations

More info at https://groups.google.com/forum/?fromgroups=!topic/sabredav-discuss/ehOUu7wTSGQ...

CVE-2012-2652

The bdrvopen function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite or read arbitrary files via a symlink attack on an unspecified temporary file...

CVE-2012-0813

CVE-2012-0813 affects Wicd prior to 1.7.1. The vulnerability arises because passwords and passphrases are written to log files in /var/log/wicd, enabling a local attacker to obtain sensitive information. A related issue (CVE-2012-2095) concerns unsanitized input from the daemon’s D‑Bus interface....

CVE-2011-0017

The openlog function in log.c in Exim 4.72 and earlier does not check the return value from 1 setuid or 2 setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack...

Top 10 IT Security Trends for 2011

The crystal ball gazing has started early this year. Typically, tech prediction pieces emerge after Christmas, but the first 'security trends for 2011' missive has already dropped into my inbox. So, what does the somewhat premature Imperva Application Defense Center think will worry us the most o...