161 matches found
CVE-2014-5416
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none...
My NJ Client APP has parallel override access vulnerability
My Nanjing Client APP is a city-level public service mobile application that integrates all kinds of living information in Nanjing. My Nanjing Client APP has a parallel override access vulnerability. Allowing an attacker to access all the real-name registered user and enterprise information and...
SUSE-SU-2017:0004-1 Security update for zlib
This update for zlib fixes the following issues: CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 Incompatible declarations for extern...
SUSE-SU-2016:3209-1 Security update for zlib
This update for zlib fixes the following issues: Incompatible declarations for external linkage function deflate bnc1003577 CVE-2016-9842: Undefined Left Shift of Negative Number bnc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bnc1003579 CVE-2016-9843:...
ZKTeco ZKBioSecurity 3.0 - Cross-Site Request Forgery (Add Superadmin)
Exploit for jsp platform in category web applications !-- ZKTeco ZKBioSecurity 3.0 CSRF Add Superadmin Exploit Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.0.1.0R230 Platform: 3.0.1.0R230 Personnel:...
ZKTeco ZKBioSecurity 3.0 File Path Manipulation
i? ZKTeco ZKBioSecurity 3.0 File Path Manipulation Vulnerability Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.0.1.0R230 Platform: 3.0.1.0R230 Personnel: 1.0.1.0R1916 Access: 6.0.1.0R1757 Elevator:...
Bumble: [CRITICAL] Full account takeover using CSRF
Hi , I have found a CSRF issue that allows an attacker to link his gmail , facebook ... or any social account to the victim's account and hijack the whole account. Details: When a user tries to link a gmail account with his account , after he authorizes badoo to use his gmail account he will be...
WEG SuperDrive G2 12.0.0 - Insecure File Permissions
WEG SuperDrive G2 12.0.0 - Insecure File Permissions WEG SuperDrive G2 v12.0.0 Insecure File Permissions Vendor: WEG Group Product web page: http://www.weg.net Affected version: SuperDrive G2 v12.0.0 Build 20150930-J1.8.060-NB8.0.2 SuperDrive v7.0.0 Summary: SuperDrive is a Windows graph tool for...
CentOS 6 : kernel (CESA-2014:0771)
Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
Kernel: s390: crash due to linkage stack instructions
arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service system crash by executing a crafted instruction...
DEBIAN-CVE-2014-2039
arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service system crash by executing a crafted instruction...
CVE-2014-2039
arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service system crash by executing a crafted instruction...
UBUNTU-CVE-2014-2039
arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service system crash by executing a crafted instruction...
PT-2014-4444 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.13.5 Description: The issue is related to the improper handling of the linkage stack in the Linux kernel on the s390 platform. This can be exploited by local users to cause a denial of service, resulting in a...
Google Chrome < 21.0.1180.60 Multiple Vulnerabilities
Binary data 6528.pasl...
Google Chrome < 21.0.1180.60 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 21.0.1180.60 and is, therefore, affected by the following vulnerabilities : - Re-prompts are not displayed for excessive downloads. CVE-2012-2847 - Drag and drop file access restrictions are not restrictive enough...
Analysis Challenges Stuxnet Origins Story, Suggests Links to Duqu and Other Malware
An ongoing analysis of the Duqu malware by researchers at Kaspersky Lab finds many links between the two pieces of malicious code and casts doubt on the conventional wisdom about Stuxnet’s origins. An analysis of software drivers used by both Stuxnet and the later Duqu malware has found that the...
Fedora 8 : httrack-3.42.93-1.fc8 (2008-7896)
Tue Sep 09 2008 Debarshi Ray - 3.42.93-1 - Version bump to 3.42.93. Closes Red Hat Bugzilla bugs 457523 CVE-2008-3429and 460529. - Use of generic macros in the publicly exposed API fixed by upstream. - Use of xdg-open now added by upstream. - OpenSSL version updated by upstream. - Linkage issues...