fromupnorth.com XSS vulnerability

Vulnerable URL: http://www.fromupnorth.com/funsubmitter.php?c=1 Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 08:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 29512 Google Pagerank| 5 VIP website status...

wireshark security, bug fix, and enhancement update

1.8.10-17.0.2 - Fix ocfs2 dissector John Haxby orabug 21505640 1.8.10-17.0.1.el6 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.8.10-17 - security patches - Resolves: CVE-2015-2189 CVE-2015-2191 1.8.10-16 - security patches - Resolves: CVE-2014-8710 CVE-2014-8711...

Gobetters Video Conferencing System/web/systemconfig/guangboinfo.php?id=1&from=list parameter has SQL injection vulnerability

GoBetter video conferencing system is a pure software video conferencing system with high-performance audio and video interactions, as well as perfect data functions launched by GoBetter. An SQL injection vulnerability exists in the /web/systemconfig/guangboinfo.php?id=1&from=list parameter of th...

gd: buffer read overflow in gd_gif_in.c

A buffer over-read flaw was found in the GD library. A specially crafted GIF file could cause an application using the gdImageCreateFromGif function to crash...

Cisco Digital Content Manager Message Handling Denial of Service Vulnerability

Cisco Digital Content Manager DCM is a digital content manager from Cisco USA. A security vulnerability exists in Cisco Digital Content Manager due to the program failing to effectively handle malformed ad messages from the server. An attacker is allowed to exploit this vulnerability to cause a...

PT-2015-1442

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 39.0 Firefox ESR versions 31.x prior to 31.8 and 38.x prior to 38.1 Thunderbird versions prior to 38.1 Description The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation reads...

smack: IQ response spoofing

It was found that the ParseRoster component in the Smack XMPP API did not verify the From attribute of a roster-query IQ stanza. A remote attacker could use this flaw to spoof IQ responses...

gd: buffer read overflow in gd_gif_in.c

A buffer over-read flaw was found in the GD library. A specially crafted GIF file could cause an application using the gdImageCreateFromGif function to crash...

CVE-2015-1805

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed copytouserinatomic and copyfromuserinatomic calls, which allows local users to cause a denial of service system crash or possibly gain privileges via a...

PT-2015-6379

Name of the Vulnerable Software and Affected Versions SAP HANA DB version 1.00.73.00.389160 Description The issue allows remote authenticated users to read arbitrary files via an IMPORT FROM SQL statement. Recommendations For SAP HANA DB version 1.00.73.00.389160, consider restricting access to t...

CVE-2015-3995: Exposure of Sensitive Information to an Unauthorized Actor

SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote authenticated users to read arbitrary files via an IMPORT FROM SQL statement, aka SAP Security Note 2109565...

SUSE SLES12 Security Update : docker (SUSE-SU-2015:0082-1)

This docker version upgrade fixes the following security and non security issues, and adds the also additional features : - Updated to 1.4.1 2014-12-15 : - Runtime : - Fix issue with volumes-from and bind mounts not being honored after create fixes bnc913213 - Added e2fsprogs as runtime dependenc...

Fedora 21 : qt3-3.3.8b-63.fc21 (2015-6661)

This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service application crash and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4. Please note that Qt 3 is NOT...

Fedora 22 : qt3-3.3.8b-63.fc22 (2015-6613)

This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service application crash and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4. Please note that Qt 3 is NOT...

SuSE 11.3 Security Update : mutt (SAT Patch Number 10435)

The mutt mail client has been updated to fix a heap-based buffer overflow in muttsubstrdup. CVE-2014-9116 Additionally, a patch has been added to allow users to override the 'From' address when executing mutt in batch mode. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Updated lftp packages fix CVE-2014-0139

Updated lftp packages fix security vulnerability: lftp incorrectly validates wildcard SSL certificates containing literal IP addresses, so under certain conditions, it would allow and use a wildcard match specified in the CN field, allowing a malicious server to participate in a MITM attack or ju...

UBUNTU-CVE-2015-0349

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and...

Google Chrome < 41.0.2272.76 Multiple Vulnerabilities

Binary data 8684.pasl...

Anonymous Hackers Threaten Israel with 'Electronic-Holocaust' on 7th April

The famous cyber hacker group Anonymous has vowed an 'Electronic Holocaust' against Israel in response to what the group calls 'crimes in the Palestinian territories'. In a spooky video "message to Israel" posted on YouTube March 4, Anonymous declared yet another cyber attack on April 7, which is...

PT-2015-4356

Name of the Vulnerable Software and Affected Versions Dulwich versions prior to 0.9.9 Description The issue allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree. This is due to a...