[SECURITY] Fedora 21 Update: qt-creator-3.3.2-2.fc21

Qt Creator is a cross-platform IDE integrated development environment tailored to the needs of Qt developers...

Code injection

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSScanner.ocx for Imaging Barcode scanners, Linear Barcode scanners, Presentation Barcode scanners, Retail Integrated Barcode scanners,...

Design/Logic Flaw

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSLineDisplay.ocx for Retail RP7 VFD Customer Display monitors, Retail Integrated 2x20 Display monitors, Retail Integrated 2x20 Complex...

CVE-2014-7897

HP OPOS CCO drivers released before 1.13.003 are affected by ARBITRARY CODE EXECUTION via OPOSScanner.ocx and related ActiveX controls across HP POS devices. The connected Nessus/HP advisories identify CVE-2014-7897 and related CVEs (e.g., 2014-7888..7898) as remote code execution vulnerabilities...

Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability

A vulnerability in the Cisco Integrated Management Controller IMC of Cisco Unified Computing System UCS C-Series Servers could allow an unauthenticated, adjacent attacker to access specific controls on the Cisco IMC on an affected device. The vulnerability is due to insufficient input validation...

CVE-2015-0599

The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System UCS on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web...

CVE-2015-0599

The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System UCS on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web...

Multiple Siemens Ruggedcom Products Security Bypass Vulnerabilities

Siemens Ruggedcom WIN51xx, WIN52xx, WIN70xx and WIN72xx are broadband wireless base station products from Siemens, Germany. A security vulnerability exists in the integrated management service of multiple Siemens Ruggedcom products. A remote attacker could exploit the vulnerability to bypass...

Code injection

The Network-Based Application Recognition NBAR protocol implementation in Cisco IOS 15.3100M and earlier on Cisco 2900 Integrated Services Router aka Cisco Internet Router devices allows remote attackers to cause a denial of service NBAR process hang via IPv4 packets, aka Bug ID CSCuo73682...

CVE-2015-0586

The Network-Based Application Recognition NBAR protocol implementation in Cisco IOS 15.3100M and earlier on Cisco 2900 Integrated Services Router aka Cisco Internet Router devices allows remote attackers to cause a denial of service NBAR process hang via IPv4 packets, aka Bug ID CSCuo73682...

Siemens SIMATIC S7-1200 Open Redirect Vulnerability

The Siemens SIMATIC S7-1200 is a modular PLC controller. An open redirection vulnerability exists in integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware prior to version 4.1, which allows remote attackers to redirect a user to an arbitrary web site via an unspecified vector...

Unspecified Arbitrary Code Execution Vulnerability in Oracle Integrated Lights Out Manager

Oracle Integrated Lights Out Manager is the server configuration and settings management application. An unspecified security vulnerability in the IPMI child in Oracle Integrated Lights Out Manager versions prior to 3.2.4 can be exploited by a remote attacker to submit a special request to execut...

Design/Logic Flaw

Unspecified vulnerability in the Integrated Lights Out Manager ILOM component in Oracle Sun Systems Products Suite ILOM before 3.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Backup Restore...

CVE-2014-6584

Unspecified vulnerability in the Integrated Lights Out Manager ILOM component in Oracle Sun Systems Products Suite ILOM before 3.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Backup Restore...

FirePassword - Firefox Username & Password Recovery Tool

FirePassword is first ever tool back in early 2007 released to recover the stored website login passwords from Firefox Browser. Like other browsers, Firefox also stores the login details such as username, password for every website visited by the user at the user consent. All these secret details...

Adobe Flash Player and AIR Out-of-Bounds Read Memory Corruption Vulnerability

Adobe Flash Player is a Flash file handling program.Adobe Air is a cross-OS runtime library from Adobe. An out-of-bounds memory corruption vulnerability exists in Adobe Flash Player/AIR, which allows an attacker to construct a malicious SWF file and trick a user into parsing it, which could resul...

Adobe Flash Player and AIR suffer from an unspecified heap buffer overflow vulnerability (CNVD-2015-00333)

Adobe Flash Player is a Flash file handling program.Adobe Air is a cross-OS runtime library from Adobe. A heap buffer overflow vulnerability exists in Adobe Flash Player/AIR, which allows an attacker to construct a malicious SWF file and trick a user into parsing it to execute arbitrary code in t...

UBUNTU-CVE-2015-0305

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allo...

PMB 4.1.3 Post-Auth SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PMB = 4.1.3 Post-Auth SQL Injection Vulnerability Google Dork: inurl:opaccss Date: 25-12-2014 Exploit Author: XD4rker Ismail Belkacim Email: xd4rkeratgmail.com Twitter: @xd4rker Vendor Homepage: http://www.sigb.net Software Link...

CVE-2014-8003

Cisco Integrated Management Controller in Cisco UCS 2.2(2c)A and earlier is affected by CVE-2014-8003 due to improper input validation in the map-nfs command. This allows an authenticated, local attacker to gain shell-level access to the device. The issue is tied to Bug CSCup05998. Cisco’s adviso...