11056 matches found
openSUSE Security Update : shotwell (openSUSE-2016-845)
Shotwell was updated to fix the following issues : - boo958382: Shotwell did not perform TLS certificate verification when publishing photos to external services Also contains all upstream bug fixes and improvements in the current upstream version. %NASLMINLEVEL 70300 C Tenable Network Security,...
openSUSE Security Update : 4813 (4813-1) (deprecated)
Shotwell was updated to fix the following issues : - boo958382: Shotwell did not perform TLS certificate verification when publishing photos to external services This plugin has been renamed to openSUSE-2016-844.nasl, plugin ID 90108. %NASLMINLEVEL 999999 C Tenable Network Security, Inc...
Chamilo LMS 1.10.2 Cross Site Scripting
Document Title: =============== Chamlio LMS v1.10.2 - Profile Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1781 Release Date: ============= 2016-03-14 Vulnerability Laboratory ID VL-ID: ====================================...
Information Disclosure in extension "UTOPIA" (ics_utopia)
It has been discovered that the extension "UTOPIA" icsutopia is susceptible to Information Disclosure. Release Date: March 03, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.1 and below Vulnerability Type:...
Schneider Electric SBO AS - Multiple Vulnerabilities
Schneider Electric SBO AS - Multiple Vulnerabilities Exploit Title: Schneider Electric SBO / AS Multiple Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.schneider-electric.com Versions Reported: Automation Server Series AS, AS-P, v1.7 and prior CVE-ID: CVE-2016-2278 About...
AVG Threat Labs - Cross Site Request Forgery Vulnerability
Document Title: =============== AVG Threat Labs - Cross Site Request Forgery Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1660 Release Date: ============= 2016-03-03 Vulnerability Laboratory ID VL-ID: ====================================...
WP Good News Themes Cross Site Scripting
Document Title: =============== WP Good News Themes - Client Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1771 Release Date: ============= 2016-02-29 Vulnerability Laboratory ID VL-ID:...
Fing 3.3.0 Persistent Mail Encoding
Document Title: =============== Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1772 Release Date: ============= 2016-02-29 Vulnerability Laboratory ID VL-ID: ====================================...
GTA Firewall GB-OS 6.2.02 Script Insertion
Document Title: =============== GTA Firewall GB-OS v6.2.02 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1713 Release Date: ============= 2016-02-24 Vulnerability Laboratory ID VL-ID:...
RozBlog Weblog Service Cross Site Request Forgery / Cross Site Scripting
Document Title: =============== RozBlog Weblog Service - Authentication Bypass / Cross Site Request Forgery / Cross Site Scripting References Source: ==================== http://ehsansec.ir/advisories/rozblog-xsrf-xss-bypass.txt Release Date: ============= 2016-02-23 Product & Service Introductio...
Cross-Site Scripting in TYPO3 component CSS styled content
It has been discovered, that TYPO3 is susceptible to Cross-Site Scripting. Component Type: TYPO3 CMS Release Date: February 23, 2016 Vulnerable subcomponent: CSS styled content Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.18 and 7.6.0 to 7.6.3 Severity: Medium...
SamenBlog Weblog Service Cross Site Request Forgery / Cross Site Scripting
Document Title: =============== SamenBlog Weblog Service - Cross Site Request Forgery / Cross Site Scripting References Source: ==================== http://ehsansec.ir/advisories/samenblog-xsrf-xss.txt Release Date: ============= 2016-02-20 Product & Service Introduction:...
InstantCoder v1.0 iOS - Multiple Web Vulnerabilities
Document Title: =============== InstantCoder v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1738 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ==================================== 1738...
Threat Outbreak Alert RuleID21167: Email Messages Distributing Malicious Software on February 19, 2016
Medium Alert ID: 43629 First Published: 2016 February 19 14:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21167 may contain the following files: Name |...
Adobe Cross Site Scripting / Open Redirect
Document Title: =============== Adobe - Multiple Client Side Cross Site Scripting Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1628 PSIRT ID: 4260 / 4261 Release Date: ============= 2016-02-15 Vulnerability Laboratory ID VL-ID:...
Chamilo LMS Cross Site Scripting
Document Title: =============== Chamilo LMS - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Video: https://www.youtube.com/watch?v=gNZsQjmtiGI Release Date: ============= 2016-02-17 Vulnerability Laborator...
Threat Outbreak Alert RuleID21064: Email Messages Distributing Malicious Software on February 18, 2016
Medium Alert ID: 43594 First Published: 2016 February 18 16:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21064 may contain the following files: Name |...
Redaxo CMS 5.0.0 Cross Site Scripting / SQL Injection
=== LSE Leading Security Experts GmbH - Security Advisory 2016-01-18 === Redaxo CMS contains multiple vulnerabilities ------------------------------------------------------------- Problem Overview ================ Technical Risk: high Likelihood of Exploitation: medium Vendor:...
Use-after-free during CNAME response processing in resolver
Use-after-free during CNAME response processing in resolver Severity: medium CVE-2016-0746 Not vulnerable: 1.9.10+, 1.8.1+ Vulnerable: 0.6.18-1.9.9...