RHEL 4 : JBoss EAP (RHSA-2010:0959)

Updated JBoss Enterprise Application Platform 5.1 packages that fix one security issue and various bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score,...

CentOS 5 : OpenIPMI (CESA-2013:0123)

Updated OpenIPMI packages that fix one security issue, multiple bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which give...

Ettercap 0.7.5.1 - Stack Overflow

Ettercap 0.7.5.1 - Stack Overflow Title: Ettercap Stack overflow CWE-121 References: CVE-2012-0722 Discovered by: Sajjad Pourali Vendor: http://www.ettercap.sourceforge.net/ Vendor contact: 13-01-01 21:20 UTC No response Solution: Using the patch Patch:...

Ettercap <= 0.7.5.1 Stack Overflow Vulnerability

Exploit for unix platform in category dos / poc Title: Ettercap Stack overflow CWE-121 References: CVE-2012-0722 Discovered by: Sajjad Pourali Vendor: http://www.ettercap.sourceforge.net/ Vendor contact: 13-01-01 21:20 UTC No response Solution: Using the patch Patch:...

Paliz CMS Full Path Disclosure Vulnerability

Title: Paliz CMS Full Path Disclosure Vulnerability Vulnerable Version: all versions Vendor URL: http://palizct.com Impact: Low =========================== Vulnerability Description: =========================== Full Path Disclosure Vulnerability, enable the attacker to see the root path...

Paliz CMS Path Disclosure

Title: Paliz CMS Full Path Disclosure Vulnerability Vulnerable Version: all versions Vendor URL: http://palizct.com Impact: Low =========================== Vulnerability Description: =========================== Full Path Disclosure Vulnerability, enable the attacker to see the root path...

Fedora 17 : puppet-2.7.18-1.fc17 (2012-10891)

This is an upstream security release. It addresses a number of issues found in puppet-2.7.x. The Red Hat security team has rated this update as having low security impact. Refer to the upstream release notes and bugzilla entries for further details...

Fedora 17 : openssl-1.0.0h-1.fc17 (2012-4630)

This minor update from upstream fixes two security vulnerabilities with moderate and low impact. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 16 : openssl-1.0.0f-1.fc16 (2012-0232)

New upstream package with bugfixes and fixes for moderate and low impact CVEs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 15 : pam-1.1.5-1.fc15 (2011-16365)

Low impact security update from upstream. Only minor and safe changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Vietsunit Script <= (index.php) Local File Include Vulnerability

Exploit for php platform in category web applications ---------------------------------------------------------------- Vietsunit Script True Reference: 1 For more information about this vulnerability URL: http://www.hakipedia.com/index.php/LocalFileInclusion Important Notes: - Vendor did not...

Vietsunit Script Local File Inclusion

---------------------------------------------------------------- Vietsunit Script True Reference: 1 For more information about this vulnerability URL: http://www.hakipedia.com/index.php/LocalFileInclusion Important Notes: - Vendor did not respond to the email as well as the phone. As there is not...

Red Hat Security Advisory 2011-1798-01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Low: JBoss Enterprise Application Platform 5.1.2 update Advisory ID: RHSA-2011:1798-01 Product: JBoss Enterprise Application Platform Advisory UR...

OSI Security: Elitecore Cyberoam UTM - Authenticated Cross-Site Scripting Vulnerability

Elitecore Cyberoam UTM - Authenticated Cross-Site Scripting Vulnerability http://www.osisecurity.com.au/advisories/cyberoam-authenticated-cross-site-scripting Release Date: 20-Jul-2011 Software: Elitecore Technologies - Cyberoam http://www.cyberoam.com/ "Cyberoam Unified Threat Management...

Mozilla Foundation Security Advisory 2011-18

Mozilla Foundation Security Advisory 2011-18 Title: XSLT generate-id function heap address leak Impact: Low Announced: April 28, 2011 Reporter: Chris Evans Products: Firefox, SeaMonkey Fixed in: Firefox 4.0.1 Firefox 3.6.17 Firefox 3.5.19 SeaMonkey 2.0.14 Description Chris Evans of the Chrome...

[DCA-2011-0001] TP-LINK TL-WR740N Multiple Vulnerabilities - Stored XSS - Web Console and Upnp server DoS

DCA-2011-0001 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software/Hardware - TP-LINK TL-WR740N Vendor Product Description - The TL-WR740N is a combined wired/wireless network connection device integrated with internet-sharing router and 4-port switch. Th...

Air Contacts Lite Denial Of Service

Discussion - DcLabs Security Research Group advises about the following vulnerabilityies: Software - Air Contacts Lite By i-NOVATiON GmbH Vendor Product Description - Sharing contacts can't be easier. Wireless access to your iPhone contacts from your Mac or PC. This is the Lite Version of Air...

[DCA-2011-0006] Hiawatha 7.4 - Denial-of-Service

Discussion - DcLabs Security Research Group advises about the following vulnerabilityies: Software - Hiawatha WebServer 7.4 Vendor Product Description - Hiawatha is an open source webserver with a focus on security. I started Hiawatha in January 2002. Before that time, I had used several...

[DCA-2011-0002]: TOTVS ERP Microsiga Protheus - Users Enumeration

DCA-2011-0002 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - TOTVS ERP Microsiga Protheus Vendor Product Description - Portuguese - Software de Gesto - TOTVS A TOTVS uma empresa de software, inovao, relacionamento e suporte gesto, lder absoluta no...

TOTVS ERP Microsiga Protheus User Enumeration

DCA-2011-0002 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - TOTVS ERP Microsiga Protheus Vendor Product Description - Portuguese - Software de Gestão - TOTVS A TOTVS é uma empresa de software, inovação, relacionamento e suporte à gestão, líder...