math.chalmers.se XSS vulnerability

Vulnerable URL: http://www.math.chalmers.se/olleh/1" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31452 Google Pagerank| 6 VIP website status:| Yes Check math.chalmers.se SSL...

squid -- TLS/SSL parser denial of service vulnerability

Amos Jeffries, release manager of the Squid-3 series, reports: Vulnerable versions are 3.5.0.1 to 3.5.8 inclusive, which are built with OpenSSL and configured for "SSL-Bump" decryption. Integer overflows can lead to invalid pointer math reading from random memory on some CPU architectures. In the...

The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information

The vulnerability of the boost-math-1.41.0 package for the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of the CentOS operating system, which allows a malicious attacker to compromise the accessibility of protected information

The vulnerability of the boost-math-1.41.0 package on the CentOS operating system can lead to a violation of the accessibility of protected information. Exploiting this vulnerability can be carried out remotely...

Google Chrome 'Math.Random()' Unauthorized Access Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome that originates from the application generating weak random numbers. The vulnerability can be exploited by an attacker to obtain sensitive information and unauthorized...

[SECURITY] Fedora 21 Update: glibc-2.20-8.fc21

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2015:0092 Updated glibc packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score,...

Mozilla.org Cross Site Scripting

Domains: http://lxr.mozilla.org/ http://mxr.mozilla.org/ The two domains above are almost the same Websites information: lxr.mozilla.org, mxr.mozilla.org are cross references designed to display the Mozilla source code. The sources displayed are those that are currently checked in to the mainline...

CVE-2014-6786

The Math for Kids - Subtraction aka it.tinytap.attsa.deepsub application 1.2.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Math for Kids - Subtraction aka it.tinytap.attsa.deepsub application 1.2.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6786

The Math for Kids - Subtraction aka it.tinytap.attsa.deepsub application 1.2.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6786

The CVE refers to The Math for Kids - Subtraction (aka it.tinytap.attsa.deepsub) Android app version 1.2.10, where the SSL/TLS trust check is not performed (does not verify X.509 certificates). This allows man-in-the-middle attackers to spoof servers and potentially obtain sensitive information v...

PT-2014-7464

Name of the Vulnerable Software and Affected Versions The Math for Kids - Subtraction aka it.tinytap.attsa.deepsub version 1.2.10 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information...

CVE-2014-6786: Undefined Security Weakness

The Math for Kids - Subtraction aka it.tinytap.attsa.deepsub application 1.2.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Numbers & Addition! Math games aka air.com.tribalnova.ilearnwith.ipad.App2En application 1.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5552

The Numbers & Addition! Math games aka air.com.tribalnova.ilearnwith.ipad.App2En application 1.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6537

Name of the Vulnerable Software and Affected Versions The Numbers & Addition! Math games aka air.com.tribalnova.ilearnwith.ipad.App2En version 1.4.3 Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain...

CVE-2014-5552: Undefined Security Weakness

The Numbers & Addition! Math games aka air.com.tribalnova.ilearnwith.ipad.App2En application 1.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

UBUNTU-CVE-2014-2972

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value...

Updated glibc packages fix security issues

Stephane Chazelas discovered that directory traversal issue in locale handling in glibc. glibc accepts relative paths with ".." components in the LC and LANG variables. Together with typical OpenSSH configurations with suitable AcceptEnv settings in sshdconfig, this could conceivably be used to...