PT-2013-2978 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5505 affected versions not specified Description: A privilege elevation issue exists in the Easy VPN component, allowing local users to gain privileges. The vulnerability can be exploited by an...

PT-2013-3046 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue arises from improper handling of objects in memory by Windows USB drivers, leading to an elevation of privilege. This could allow an attacker to execute arbitrary code in kernel...

PT-2013-2073 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 9 Description: A use-after-free issue allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object. This occurs due to the way Internet Explorer accesses...

PT-2012-6122 · Jpmorgan Chase · Chase Mobile Banking Application

Name of the Vulnerable Software and Affected Versions: Chase mobile banking application for Android affected versions not specified Description: The issue concerns a failure to verify the server hostname against the domain name in the X.509 certificate's Common Name CN or subjectAltName field. Th...

PT-2012-6131 · Filesanywhere · Filesanywhere

Name of the Vulnerable Software and Affected Versions: FilesAnywhere affected versions not specified Description: The issue arises from FilesAnywhere not verifying that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This...

PT-2012-4537 · Oracle · Oracle Application Server Single Sign-On

Name of the Vulnerable Software and Affected Versions: Oracle Application Server Single Sign-On version 10.1.4.3.0 Description: The issue affects the integrity of the system, related to Redirects. Recommendations: For version 10.1.4.3.0, at the moment, there is no information about a newer versio...

PT-2012-2633 · Oracle · Oracle Fusion Middleware +1

Name of the Vulnerable Software and Affected Versions: Oracle Fusion Middleware version 10.1.4.3.0 Description: The issue affects the integrity of the system, related to Redirects in the Oracle Application Server Single Sign-On component. Recommendations: For Oracle Fusion Middleware version...

PT-2012-1377 · Unknown · Malware Defender

Name of the Vulnerable Software and Affected Versions: Malware Defender version 2.6.0 Description: A race condition issue allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware...

PT-2012-1382 · Online Solutions · Online Solutions Security Suite

Name of the Vulnerable Software and Affected Versions: Online Solutions Security Suite version 1.5.14905.0 Description: A race condition exists in the software, allowing local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked. This is achieved...

PT-2012-1366 · Bitdefender · Bitdefender Total Security

Name of the Vulnerable Software and Affected Versions: BitDefender Total Security 2010 version 13.0.20.347 Description: A race condition allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-base...

PT-2012-3622 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 8 through 9 Description: A remote code execution issue exists due to improper handling of objects in memory by Internet Explorer, allowing attackers to execute arbitrary code by accessing a deleted object...

nginx 'ngx_cpystrn()'信息泄露漏洞(CVE-2012-1180)

BUGTRAQ ID: 52578 CVE ID: CVE-2012-1180 nginx是一款使用非常广泛的高性能web服务器。 nginx在处理上游服务器的畸形HTTP响应的实现上存在信息泄露漏洞，攻击者可利用此漏洞获取敏感信息。 0 nginx 1.0.9 nginx 1.0.8 nginx 1.0.10 厂商补丁： Igor Sysoev ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://nginx.net/...

vsftpd 2.3.2 remote denial-of-service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 vsftpd 2.3.2 remote denial-of-service Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - - Dis.: 23.12.2010 - - Pub.: 01.03.2011 CVE: CVE-2011-0762 CERT: VU590604 Fix: vsftpd 2.3.4 15.02.2011 Affected Software verified...

PT-2011-2033 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: A remote code execution issue exists due to incorrect initialization or deletion of an object when accessed by Internet Explorer. An attacker can exploit this by creating a...

PT-2010-1178 · Microsoft · Office +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions XP SP3 through 2010 Microsoft Office for Mac versions 2004 through 2011 Open XML File Format Converter for Mac version affected versions not specified Description: A remote code execution issue exists due to a...

PT-2010-4987 · Adobe +1 · Flash Player +1

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue is related to a problem in Adobe Flash Player. No specific details about the nature of the issue, affected devices, or real-world incidents are provided. Recommendation...

PT-2010-4984 · Adobe +1 · Flash Player +1

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue concerns a problem in Adobe Flash Player. No specific details about the nature of the issue, affected devices, or real-world incidents are provided. Recommendations: At...

PT-2010-4989 · Adobe +1 · Flash Player +1

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue concerns a problem in Adobe Flash Player. No specific details about the nature of the issue, affected devices, or real-world incidents are provided. Recommendations: At...

PT-2010-4986 · Adobe +1 · Flash Player +1

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: General information about the issue is not provided. There is no information about the estimated number of potentially affected devices worldwide or details about real-world...

ProCheckUp Security Advisory 2009.15

PR09-15: XSS injection vulnerability within HP System Management Homepage Insight Manager Vulnerability found: 11th October 2009 Severity: Medium Description: A XSS vulnerability has been found within HP System Management; Arising from insufficient input filtering. By using a specially-crafted...