Critical: Red Hat Security Advisory: php security update

Updated php packages that fix one security issue are now available for Red Hat Enterprise Linux 5.3 and 5.6 Long Life, and Red Hat Enterprise Linux 5.9 Extended Update Support. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability...

Critical: Red Hat Security Advisory: cfme security, bug fix, and enhancement update

Updated cfme packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat CloudForms 3.0. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, whic...

Schneider Electric Floating License Manager权限提升漏洞

BUGTRAQ ID: 65873 CVECAN ID: CVE-2014-0759 Schneider Electric Floating License Manager是许可证管理器。 Schneider Electric Floating License Manager在实现上存在“未引用搜索路径或元素”漏洞，如果服务的可执行路径包含空格，攻击者可利用此漏洞执行恶意程序。 0 Schneider Electric Floating License Manager 1.0.0 - 1.4.0 厂商补丁： Schneider Electric ------------------...

Google Chrome and Apple Safari Floating Styles Use-After-Free Code Execution - Ver2 (CVE-2011-2790)

A remote code execution vulnerability has been reported in Apple Safari and Google Chrome. The vulnerability is due to an error while handling floating style information. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted web page. Successful...

Google Chrome and Apple Safari Floating Styles Use-After-Free Code Execution - Ver2 (CVE-2011-2790)

A remote code execution vulnerability has been reported in Apple Safari and Google Chrome. The vulnerability is due to an error while handling floating style information. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted web page. Successful...

CVE-2014-0759

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

CVE-2014-0759 Schneider Electric Floating License Manager Unquoted Search Path or Element

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

CVE-2014-0759 Schneider Electric Floating License Manager Unquoted Search Path or Element

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

PT-2014-3821

Name of the Vulnerable Software and Affected Versions Schneider Electric Floating License Manager versions 1.0.0 through 1.4.0 Description The issue allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space...

Apple Safari Webkit Use-After-Free Code Execution- Ver2 (CVE-2010-1807)

A code execution vulnerability has been reported in Apple Safari's WebKit. The vulnerability is due to a design error when processing floating point data types. A remote attacker could trigger this vulnerability by enticing a vulnerable target to access a specially crafted HTML document. Successf...

Moderate: Red Hat Security Advisory: openstack-neutron security, bug fix, and enhancement update

Updated openstack-neutron packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability...

Critical: Red Hat Security Advisory: ruby193-ruby security update

Updated ruby193-ruby packages that fix one security issue are now available for Red Hat OpenStack 3.0. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

ruby: heap overflow in floating point parsing

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a string that is converted to...

Apple Safari Webkit Floating Point Data Type Code Execution - Ver2 (CVE-2010-1807)

Safari is a web browsing application developed by Apple. Safari browsing functionality is built around the set of components called WebKit. WebKit is a development toolkit which allows third party developers to build applications that use Internet technologies such as HTML, HTTP, and others. A...

MGASA-2014-0003 Updated ruby package fixes security vulnerability

Charlie Somerville discovered that Ruby incorrectly handled floating point number conversion. An attacker could possibly use this issue with an application that converts text to floating point numbers to cause the application to crash, resulting in a denial of service, or possibly execute arbitra...

Updated ruby package fixes security vulnerability

Charlie Somerville discovered that Ruby incorrectly handled floating point number conversion. An attacker could possibly use this issue with an application that converts text to floating point numbers to cause the application to crash, resulting in a denial of service, or possibly execute arbitra...

Debian DSA-2810-1 : ruby1.9.1 - heap overflow

Charlie Somerville discovered that Ruby incorrectly handled floating point number conversion. If an application using Ruby accepted untrusted input strings and converted them to floating point numbers, an attacker able to provide such input could cause the application to crash or, possibly, execu...

Debian DSA-2809-1 : ruby1.8 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Ruby language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-1821 Ben Murphy discovered that unrestricted entity expansion in REXML can lead to a Denial of Service by consumin...

[SECURITY] [DSA 2809-1] ruby1.8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2809-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2809-1 (ruby1.8 - several vulnerabilities)

Several vulnerabilities have been discovered in the interpreter for the Ruby language. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-1821 Ben Murphy discovered that unrestricted entity expansion in REXML can lead to a Denial of Service by consuming a...