PT-2014-3733

Name of the Vulnerable Software and Affected Versions RSA Adaptive Authentication On-Premise versions 6.x through 7.1 before SP0 P2 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML via vectors...

ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability

ESA-2014-015.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability EMC Identifier: ESA-2014-015 CVE Identifier: CVE-2014-0623 Severity Rating: CVSS v2 Base Score: 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N Affected Products: RSA...

PT-2014-3719

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Manager version 7.1 before SP4 P32 Description A cross-site scripting XSS issue exists, related to a "cross frame scripting" problem, allowing remote attackers to inject arbitrary web script or HTML via unspecified...

EMC RSA Authentication Manager crossframe scripting

Self-Service Console cross frame scripting...

CVE-2014-0623: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Self-Service Console in EMC RSA Authentication Manager 7.1 before SP4 P32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" issue...

samba: clickjacking vulnerability in SWAT

The Samba Web Administration Tool SWAT in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a 1 FRAME or 2 IFRAME element...

Cisco Wireless LAN Controller远程拒绝服务漏洞(CVE-2014-0707)

BUGTRAQ ID: 65986 CVECAN ID: CVE-2014-0707 Cisco WLC 负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller没有正确处理 Ethernet 802.11 帧，未经身份验证的远程攻击者可触发关键错误，造成拒绝服务。 0 Cisco Wireless LAN Controller 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20140305-wlc）以及相应补丁:...

Cisco Wireless LAN Controller远程拒绝服务漏洞(CVE-2014-0706)

BUGTRAQ ID: 65985 CVECAN ID: CVE-2014-0706 Cisco WLC 负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller没有正确处理 Ethernet 802.11 帧，未经身份验证的远程攻击者可触发关键错误，造成拒绝服务。 0 Cisco Wireless LAN Controller 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20140305-wlc）以及相应补丁:...

CVE-2014-0707

CVE-2014-0707 affects Cisco Wireless LAN Controller (WLC) devices in versions 7.2, 7.3, and 7.4 prior to 7.4.110.0. The vulnerability allows remote attackers to cause a denial of service (device restart) by sending a crafted 802.11 Ethernet frame. Root cause is related to how WLC handles these fr...

PT-2014-3086

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Enterprise Records versions 4.5.1 through 4.5.1.7-IER-IF001 IBM InfoSphere Enterprise Records versions 5.1.1 through 5.1.1.1-IER-IF003 Description The issue makes it easier for remote attackers to conduct clickjacking attacks vi...

CVE-2013-6315: Improper Input Validation

IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and Enterprise Records 5.1.1 before 5.1.1.1-IER-IF003 do not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

CVE-2014-0706: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service device restart via a crafted 802.11 Ethernet frame, aka Bug ID CSCue87929...

CVE-2014-0707: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service device restart via a crafted 802.11 Ethernet frame, aka Bug ID CSCuf80681...

CVE-2014-2092

Cross-site scripting XSS vulnerability in lib/filemanager/ImageManager/editorFrame.php in CMS Made Simple 1.11.10 allows remote attackers to inject arbitrary web script or HTML via the action parameter, a different issue than CVE-2014-0334. NOTE: the original disclosure also reported issues that...

Apache Tomcat 6.0.x < 6.0.39 Multiple Vulnerabilities

According to its self-reported version number, the instance of Apache Tomcat 6.0.x listening on the remote host is prior to 6.0.39. It is, therefore, affected by the following vulnerabilities : - The version of Java used to build the application generates Javadoc containing a frame injection erro...

Mandriva Linux Security Advisory : tomcat6 (MDVSA-2014:042)

Updated tomcat6 packages fix security vulnerabilities : It was discovered that Tomcat incorrectly handled certain requests submitted using chunked transfer encoding. A remote attacker could use this flaw to cause the Tomcat server to stop responding, resulting in a denial of service CVE-2012-3544...

Stable Channel Update

The Stable Channel has been updated to 33.0.1750.117 for Windows, Mac, and Linux. Security Fixes and Rewards This update includes 28 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page fo...

Multiple Vulnerabilities in Cisco IPS Software

Cisco Intrusion Prevention System IPS Software is affected by the following vulnerabilities: Cisco IPS Analysis Engine Denial of Service Vulnerability Cisco IPS Control-Plane MainApp Denial of Service Vulnerability Cisco IPS Jumbo Frame Denial of Service Vulnerability The Cisco IPS Analysis Engin...

Updated tomcat6 packages fix multiple vulnerabilities and logging

Updated tomcat6 packages fix security vulnerabilities: It was discovered that Tomcat incorrectly handled certain requests submitted using chunked transfer encoding. A remote attacker could use this flaw to cause the Tomcat server to stop responding, resulting in a denial of service CVE-2012-3544....

PT-2014-1785

Name of the Vulnerable Software and Affected Versions Mumble versions 1.2.3 through 1.2.4 Description The issue allows remote attackers to cause a denial of service, potentially leading to disruption of confidentiality, integrity, and availability of protected information. This is achieved throug...