628 matches found
Ubuntu: Security Advisory (USN-2186-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Date and Time Indicator privilege escalation
It's possible to run applications as greeter user...
[USN-2186-1] Date and Time Indicator vulnerability
========================================================================== Ubuntu Security Notice USN-2186-1 April 30, 2014 indicator-datetime vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...
CVE-2013-7374
The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...
Sql injection
The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...
CVE-2013-7374
The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...
CVE-2013-7374
CVE-2013-7374 affects Ubuntu indicator-datetime (indicator-datetime package) on Ubuntu 13.10. The vulnerability allows a local user to bypass greeter screen restrictions by clicking the date, enabling access to Evolution and potentially other apps with greeter privileges. The Ubuntu Security Noti...
CVE-2013-7374
The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...
CVE-2013-7374: Undefined Security Weakness
The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...
Ubuntu 13.10 : indicator-datetime vulnerability (USN-2186-1)
It was discovered that the Date and Time Indicator incorrectly allowed Evolution to be opened at the greeter screen. An attacker could use this issue to possibly gain unexpected access to applications such as a web browser with privileges of the greeter user. Note that Tenable Network Security ha...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in vBulletin 5.1.1 Alpha 9 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to privatemessage/new/, 2 the folderid parameter to a private message in privatemessage/view, 3 a fragment indicator to /help, or 4 the vie...
USN-2186-1: Date and Time Indicator vulnerability
It was discovered that the Date and Time Indicator incorrectly allowed Evolution to be opened at the greeter screen. An attacker could use this issue to possibly gain unexpected access to applications such as a web browser with privileges of the greeter user...
UBUNTU-CVE-2013-7374
The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...
PT-2014-5110
Name of the Vulnerable Software and Affected Versions vBulletin version 5.1.1 Alpha 9 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This can be achieved through various means, including the PATH INFO to...
PT-2014-3403
Name of the Vulnerable Software and Affected Versions Ubuntu Date and Time Indicator aka indicator-datetime versions 13.10.0+13.10.x through 13.10.0+13.10.20131023.2-0ubuntu1.0 Description The issue allows local users to bypass the greeter screen restrictions by clicking the date, due to improper...
CVE-2013-7374
The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...
Google Chrome Eavesdropping Exploit Published
The developer of the annyang speech recognition JavaScript library has published exploit code for a bug in Google’s Chrome browser that could allow a malicious website to eavesdrop using a computer’s microphone long after a visitor has left a website. The code disclosure is in response, said...
SuSE 11.3 Security Update : icedtea-web (SAT Patch Number 7981)
This update to IcedTea-Web 1.4 provides the following fixes and enhancements : - Security updates - RH916774: Class-loader incorrectly shared for applets with same relative-path. CVE-2013-1926 - RH884705: fixed gifar vulnerabilit. CVE-2013-1927 - RH840592: Potential read from an uninitialized...
Oracle Linux 3 / 4 : seamonkey (ELSA-2009-1673)
From Red Hat Security Advisory 2009:1673 : Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...