CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

DEBIAN-CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

Code injection

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

CVE-2015-8025

CVE-2015-8025 affects the xscreensaver component in XScreenSaver prior to 5.34. The issue is a faulty internal consistency check that can let someone with physical access bypass the lock screen by hot-swapping monitors, exploiting a local access scenario. Public advisories describe the impact as ...

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

Debian DLA-338-1 : xscreensaver security update

xscreensaver, a screensaver daemon and frontend for X11 was vulnerable to crashing when hot-swapping monitors. For Debian 6 Squeeze, this issue has been fixed in xscreensaver version 5.11-1+deb6u11. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA...

[SECURITY] [DLA 338-1] xscreensaver security update

Package : xscreensaver Version : 5.11-1+deb6u11 CVE ID : CVE-2015-8025 Debian Bug : 802914 xscreensaver, a screensaver daemon and frontend for X11 was vulnerable to crashing when hot-swapping monitors. For Debian 6 Squeeze, this issue has been fixed in xscreensaver version 5.11-1+deb6u11. Regards...

DLA-338-1 xscreensaver - security update

Bulletin has no description...

UBUNTU-CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

Fedora 23 : qemu-2.4.0-1.fc23 (2015-13358)

Rebased to version 2.4.0 Support for virtio-gpu, 2D only Support for virtio-based keyboard/mouse/tablet emulation x86 support for memory hot-unplug - ACPI v5.1 table support for 'virt' board CVE-2015-3209: pcnet: multi-tmd buffer overflow in the tx path bz 1230536 CVE-2015-3214: i8254: out-of-...

Backup and Replication jobs fail with the following error: "CDeviceBase: resize is not supported. Failed to download disk"

Challenge Backup and Replication jobs fail with the following error: "CDeviceBase: resize is not supported. Failed to download disk". The following conditions must be met: 1. Veeam 8 Update 2 8.0.0.2021 or later 2. Backed up VM is running on ESXi 5.5 or later 3. Hot Add transport mode is used 4. ...

Freebox OS Web interface 3.0.2 XSS, CSRF

Hello list, Here are two CVEs I reported to Freebox, a french ISP: - CVE-2014-9382 - CSRF in VPN user account creation - CVE-2014-9405 - XSS Vulnerable product: Freebox OS Web interface 3.0.2. CVE-2014-9382 - CSRF in Freebox OS Web interface 3.0.2 allowing VPN user account creation...

FreeBox 3.0.2 Cross Site Request Forgery / Cross Site Scripting

Hello list, Here are two CVEs I reported to Freebox, a french ISP: - CVE-2014-9382 - CSRF in VPN user account creation - CVE-2014-9405 - XSS Vulnerable product: Freebox OS Web interface 3.0.2. CVE-2014-9382 - CSRF in Freebox OS Web interface 3.0.2 allowing VPN user account creation...

Red Hat Enterprise Virtualization Manager Very Long Snapshot Chain Denial of Service Vulnerability

Red Hat Enterprise Virtualization Manager is an enterprise virtualization management application solution from Red Hat. Red Hat Enterprise Virtualization Manager failed to set the correct snapshot creation permissions during a hot storage migration between two domains, allowing an authenticated...

Watcher v1.5.8 - Web Security Testing Tool and Passive Vulnerability Scanner

Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...

TranscenDevelopment Hot Links SQL 'report.cgi' SQL Injection Vulnerability

TranscenDevelopment Hot Links SQL is the United States TranscenDevelopment company's set of links indexing, search engine CGI scripts. A SQL injection vulnerability exists in TranscenDevelopment Hot Links SQL, which arises from the program's failure to adequately filter user-submitted input befor...

Low: Red Hat Security Advisory: powerpc-utils security, bug fix, and enhancement update

Updated powerpc-utils packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives...

Mozilla Pushes Hot Fix to Remove Superfish Cert From Firefox

Mozilla has issued a hot fix for Firefox that removes the Superfish root certificate from the browser’s trusted root store. The patch only removes the certificate if the Superfish software has been removed from the machine already, however. The Superfish adware performs SSL interception–essential...

CentOS Update for kernel CESA-2015:0164 centos5

Check the version of kernel SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882118";...