7959 matches found
Debian DSA-2835-1 : asterisk - buffer overflow
Jan Juergens discovered a buffer overflow in the parser for SMS messages in Asterisk. An additional change was backported, which is fully described in http://downloads.asterisk.org/pub/security/AST-2013-007.html With the fix for AST-2013-007, a new configuration option was added in order to allow...
Debian Security Advisory DSA 2835-1 (asterisk - buffer overflow)
Jan Juergens discovered a buffer overflow in the parser for SMS messages in Asterisk. An additional change was backported, which is fully described in http://downloads.asterisk.org/pub/security/AST-2013-007.htmlWith the fix for AST-2013-007, a new configuration option was added in order to allow...
DSA-2835-1 asterisk - buffer overflow
Bulletin has no description...
Fedora 20 : libgadu-1.12.0-0.2.rc1.fc20 (2013-23260)
From upstream changelog : - Support for Gadu-Gadu 11 protocol. - Enable server certificate verification. - Allow using custom TCP/TLS connection functions. - Allow specifying server by name, not just IP. - Small bugfixes reported by Pidgin project based on Coverity audit. Note that Tenable Networ...
Fedora 19 : libgadu-1.12.0-0.2.rc1.fc19 (2013-23517)
From upstream changelog : - Support for Gadu-Gadu 11 protocol. - Enable server certificate verification. - Allow using custom TCP/TLS connection functions. - Allow specifying server by name, not just IP. - Small bugfixes reported by Pidgin project based on Coverity audit. Note that Tenable Networ...
Jackie CMS 1.7 commercial version SQL injection vulnerability analysis-vulnerability warning-the black bar safety net
Jackie CMS 1.7 commercial version with the Zend encryption, batch after decryption, found the programmer with several functions, making this system substantially no injection vulnerabilities. In the judgment of ip, the programmers will. The filter then determines whether it is Digital, it is wort...
Asterisk Multiple Vulnerabilities (AST-2013-006 / AST-2013-007)
According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by the following vulnerabilities : - A denial of service vulnerability exists in the 'unpacksms16' function of the 'appsms.c' source file. When a 16-bit SMS message with an unusu...
PHP openssl_x509_parse() Memory Corruption Vulnerability
Exploit for php platform in category dos / poc Overview: Quote from http://www.php.net "PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML." The PHP function opensslx509parse uses a helper function called...
discuz!某自带工具可拿shell
简要描述： discuz!某自带工具，由于使用不当，可以造成webshell。 而且经过调查，使用者数量较大。 详细说明： discuz! 安装包中会自带一个转换工具 convert 这个工具由于存在安全问题，可以拿shell 一般存在网站目录 convert 或 utility/convert 而且经过调查，使用数量还是很大的。 使用前题是data目录可写，这也是这个工具的使用前题。 分析： 文件： utility\convert\include\doconfig.inc.php 中 保存配置，跟踪到saveconfigfile...
SuSE Update for MozillaThunderbird openSUSE-SU-2013:0894-1 (MozillaThunderbird)
Check for the Version of MozillaThunderbird OpenVAS Vulnerability Test $Id: gbsuse201308941.nasl 8494 2018-01-23 06:57:55Z teissa $ SuSE Update for MozillaThunderbird openSUSE-SU-2013:0894-1 MozillaThunderbird Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH,...
SuSE Update for xulrunner openSUSE-SU-2013:0929-1 (xulrunner)
Check for the Version of xulrunner OpenVAS Vulnerability Test $Id: gbsuse201309291.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for xulrunner openSUSE-SU-2013:0929-1 xulrunner Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This...
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2013:0946-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-6039
Multiple cross-site scripting XSS vulnerabilities in NagiosQL 3.2 SP2 allow remote attackers to inject arbitrary web script or HTML via the txtSearch parameter to 1 admin/hostdependencies.php, 2 admin/hosts.php, or other unspecified pages that allow search input, related to the search functionali...
[SECURITY] Fedora 18 Update: php-symfony2-HttpFoundation-2.2.10-1.fc18
The HttpFoundation Component defines an object-oriented layer for the HTTP specification. In PHP, the request is represented by some global variables $GET, $POST, $FILE, $COOKIE, $SESSION... and the response is generated by some funct ions echo, header, setcookie, .... The Symfony2 HttpFoundation...
CVE-2013-6039: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in NagiosQL 3.2 SP2 allow remote attackers to inject arbitrary web script or HTML via the txtSearch parameter to 1 admin/hostdependencies.php, 2 admin/hosts.php, or other unspecified pages that allow search input, related to the search functionali...
CVE-2013-6791
Microsoft Enhanced Mitigation Experience Toolkit EMET before 4.0 uses predictable addresses for hooked functions, which makes it easier for context-dependent attackers to defeat the ASLR protection mechanism via a return-oriented programming ROP attack...
CVE-2013-6875: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in functions/prependadm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php...
SuSE Update for MozillaFirefox openSUSE-SU-2013:0825-1 (MozillaFirefox)
Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201308251.nasl 8456 2018-01-18 06:58:40Z teissa $ SuSE Update for MozillaFirefox openSUSE-SU-2013:0825-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH,...
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2013:0825-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...