CVE-2015-7848

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to ...

CVE-2015-7848

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to ...

CVE-2015-7848

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to ...

FireMon Immediate Insight Detection

This script performs SSH based detection of FireMon Immediate Insight SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

FireMon Immediate Insight Webinterface Detection

This script performs HTTP based detection of FireMon Immediate Insight Webinterface SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

DEBIAN-CVE-2016-4020

The patchinstruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register TPR...

DLA-432-1 postgresql-8.4 - security update

Bulletin has no description...

OpenSSL high-risk vulnerabilities allow attackers to decrypt HTTPS traffic-bug warning-the black bar safety net

OpenSSL maintainer to fix a high risk vulnerability allows an attacker can obtain the decryption of HTTPS and other encrypted traffic key. Vulnerability the potential impact of While serious, but the need to meet multiple criteria to be used: the vulnerability exists only in OpenSSL 1.0.2; rely o...

GRUB2 the zero-day vulnerability affecting Linux users, Ubuntu, RHEL patch now available-vulnerability warning-the black bar safety net

Canonical's latest Ubuntu Security Notice displayed in GRUB2GNU GRand Unified Bootloader in the presence of a zero-day security vulnerability, it will affect to GRUB version 2. 0 2 Beta of the GNU/Linux distribution. The security vulnerability is Ismael Ripoll and Hector Marco found that when the...

h2o -- directory traversal vulnerability

Yakuzo reports: H2O up to version 1.4.4 / 1.5.0-beta1 contains a flaw in its URL normalization logic. When file.dir directive is used, this flaw allows a remote attacker to retrieve arbitrary files that exist outside the directory specified by the directive. H2O version 1.4.5 and version...

Linux/x86-64 - shutdown -h now Shellcode (65 bytes)

Linux/x86-64 - shutdown -h now Shellcode 65 bytes. Shellcode exploit for Linuxx86-64 platform / ; Title: shutdown -h now x8664 Shellcode - 65 bytes ; Platform: linux/x8664 ; Date: 2014-06-27 ; Author: Osanda Malith Jayathissa @OsandaMalith section .text global start start: xor rax, rax xor rdx, r...

SEC Consult SA-20131227-0 :: IBM Web Content Manager (WCM) XPath Injection

SEC Consult Vulnerability Lab Security Advisory 20131227-0 ======================================================================= title: XPath Injection product: IBM Web Content Manager WCM vulnerable version: 6.x, 7.x, 8.x fixed version: - impact: high homepage: http://www.ibm.com/ found:...

SEC Consult SA-20131015-0 :: Multiple vulnerabilities in SpamTitan

SEC Consult Vulnerability Lab Security Advisory 20131015-0 ======================================================================= title: Multiple vulnerabilities in SpamTitan product: SpamTitan vulnerable version: =5.12, 5.13 is likely to be affected too fixed version: 6.00 impact: Critical...

University of Regina's web server hacked by SecurityBus

University of Regina's web server hacked by SecurityBus On Monday an intruder to the University of Regina's main web server was detected. As a result, the U of R took immediate steps to deal with the situation and the institution's website is currently unavailable. Some essential services are...

Email passwords are not immediately deleted when deleting private data – Opera Security Advisories

Email passwords are not immediately deleted when deleting private data – Opera Security Advisories OPCOM Team | January 26, 2011 Severity Moderate Description When using “Delete Private Data” and selecting the option to “Clear all email account passwords”, the passwords were not deleted...

Mandrake Security Advisory MDVSA-2009:171 (pulseaudio)

The remote host is missing an update to pulseaudio announced via advisory MDVSA-2009:171. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

MDVA-2009:105 : fuse

FUSE default setup was requiring non privileged users to be added manually to fuse group to be able to use fuse feature and this feature was not available immediatly after fuse package installation. This package updates ensure fuse is now immediatly available after package installation and for al...

Design/Logic Flaw

The Installer in Apple Safari before 4.0 on Windows allows local users to gain privileges by checking a box that specifies an immediate launch of the application after installation, related to an unspecified compression method...

CVE-2009-2027

Summary (CVE-2009-2027): Apple Safari on Windows before version 4.0 contains a local-privilege-escalation flaw in the Windows installer. Checking a box that triggers immediate application launch after installation (related to an unspecified compression method) can allow local users to gain privil...

Debian Security Advisory DSA 033-1 (analog)

The remote host is missing an update to analog announced via advisory DSA 033-1. OpenVAS Vulnerability Test $Id: deb0331.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 033-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...