7393 matches found
Update Java version bundled in the installer
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-37164. panel The version of Java bundled with Confluence is 1.7.015 which is a little bit dated February 2013. We should bundle...
SafeNet Sentinel Protection Installer Keys Server Denial of Service Vulnerability
SafeNet Sentinel Protection Installer is a set of network security software from SafeNet. The software can provide Internet traffic monitoring, Internet bandwidth monitoring and control, Internet traffic logging and other functions for computers on the LAN. A denial of service vulnerability exist...
IBM Rational ClearCase Information Disclosure Vulnerability
IBM Rational ClearCase is a suite of software configuration management solutions from IBM in the United States. The solution provides version control, workspace management, parallel development support and build auditing. A security vulnerability exists in the installer for IBM Rational ClearCase...
DSA-3148-1 chromium-browser - end of life
Bulletin has no description...
Google Chrome uninstall-survey function unauthorized access vulnerability
Google Chrome is a web browser developed by the American company Google Google. The installer/util/googlechromedistribution.cc file in the uninstall-survey function in Google Chrome 40.0.2214.85 and earlier versions has a ' The...
CVE-2014-4835
IBM ServerGuide before 9.63, UpdateXpress System Packs Installer UXSPI before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file...
Important: Red Hat Bug Fix Advisory: Red Hat Satellite 6 server bug fix update
Updated the following packages to fix several bugs in Red Hat Satellite 6: foreman foreman-proxy katello-agent pulp pulp-nodes pulp-puppet pulp-rpm ruby193-rubygem-fog ruby193-rubygem-foreman-tasks packages. These packages are now available in Red Hat Satellite 6. Red Hat Satellite is a system...
FirePassword - Firefox Username & Password Recovery Tool
FirePassword is first ever tool back in early 2007 released to recover the stored website login passwords from Firefox Browser. Like other browsers, Firefox also stores the login details such as username, password for every website visited by the user at the user consent. All these secret details...
Instant PDF Password Protector - Password Protect PDF file
Instant PDF Password Protector is the Free tool to quickly Password Protect PDF file on your system. With a click of button, you can lock or protect any of your sensitive/private PDF documents. You can also use any of the standard Encryption methods - RC4/AES 40-bit, 128-bit, 256-bit based upon t...
Type confusion
The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via craft...
CVE-2013-2604
CVE-2013-2604 affects RealNetworks GameHouse RealArcade Installer (ActiveMARK Game Installer) 2.6.0.481 and 3.0.7. The weakness is permissions in the GameHouse Games directory tree that allow local users to place a Trojan horse DLL (e.g., DDRAW.DLL) in an individual game’s directory, enabling pri...
CVE-2014-9141
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program...
CVE-2014-9141
CVE-2014-9141 affects Thomson Reuters Fixed Assets CS 13.1.4 and earlier. The installer exposes weak permissions on connectbgdl.exe, enabling a local user to modify the program and achieve arbitrary code execution. The vulnerability scope is local, with no user interaction required stated in the ...
CuckooAutoInstall - Auto Installer Script for Cuckoo Sandbox
What is Cuckoo Sandbox? In three words, Cuckoo Sandbox is a malware analysis system. What does that mean? It simply means that you can throw any suspicious file at it and in a matter of seconds Cuckoo will provide you back some detailed results outlining what such file did when executed inside an...
PYSEC-2014-11
pip 1.3 through 1.5.6 allows local users to cause a denial of service prevention of package installation by creating a /tmp/pip-build- file for another user...
CVE-2014-4812
The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port...
Privilege escalation
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."...
CVE-2014-4073
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."...
Shellshock Exploits Spreading Mayhem Botnet Malware
The Mayhem malware piqued researchers’ interest earlier this summer after a published report from researchers at Russian search engine Yandex shed light on its ability to target Linux and UNIX machines and run under restricted privileges. Generally, web servers are well guarded against remote...