1661 matches found
SOL15931 - Unbound vulnerability CVE-2014-8602
Recommended action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not list any version...
PT-2014-1845 · X.Org +5 · Xorg-X11-Server +5
Name of the Vulnerable Software and Affected Versions: xorg-x11-server-Xdmx version 1.15.0 xorg-x11-server-debuginfo version 1.15.0 xorg-x11-server-Xnest version 1.15.0 xorg-x11-server-Xephyr version 1.15.0 xorg-x11-server-source version 1.15.0 xorg-x11-server-Xvfb version 1.15.0...
PivotX -- administrator password reset vulnerability
US CERT reports: PivotX contains a vulnerability that allows an attacker to change the password of any account just by guessing the username. Version 2.2.4 has been reported to not be affected. This vulnerability is being exploited in the wild and users should immediately upgrade to 2.2.5 or late...
EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export
EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export Trustwave's SpiderLabs Security Advisory TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra Network Attached Storage NAS appliance https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt Published:...
IBM Lotus Notes sets insecure default permissions on program data
Overview IBM Lotus Notes sets insecure default permissions on the Notes directory. This vulnerability may allow a local attacker to gain unintended access to Lotus Notes program data. Description IBM Lotus Notes installs numerous program files and program data in a special directory known as the...
CVE-2004-1038
A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: th...
[Full-Disclosure] [ GLSA 200411-07 ] Proxytunnel: Format string vulnerability
Gentoo Linux Security Advisory GLSA 200411-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Netscape 7.02 Client Detection Tool plug-in buffer overrun
Advisory name ============= Netscape 7.02 Client Detection Tool plug-in buffer overrun Affected software ================= Netscape 7.02 for Windows Problem description =================== Netscape 7.02 and probably earlier versions contains Client Detection Tool plug-in that handles...
Security Advisory: Web interface vulnerabilities in ACS for Windows
Cisco Security Advisory: Web interface vulnerabilities in ACS for Windows Revision 1.0 For Public Release 2002 April 03 16:00 UTC +0000 - ---------------------------------------------------------------------------- Contents Summary Products Affected Details Impact Software Versions and Fixes...
Checkpoint FW1 SecuRemote/SecureClient "re-authentication" (client side hacks of users.C)
Affected products : All versions of Checkpoint FW1 when used with SecuRemote/SecureClient Namely 4.0, 4.1 at any SP level, and NG FP1 http://www.checkpoint.com/products/security/vpn-1clients.html Description : Checkpoint Firewall-1 SecuRemote/SecureClient "authentication timeout" defined in FW1's...
Oracle 9iAS creates temporary files when processing JSP requests that are world-readable
Overview Oracle Database Server version 9iAS makes JSP source code publicly available. The source code may be used by attackers to analyze proprietary business logic or uncover Oracle's network configuration, usernames, and/or passwords. Description When Oracle receives a request for JSP file, it...
IRIX IGMP vulnerability
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX IGMP vulnerability Number: 20011001-01-P Date: October 22, 2001 Reference: CVE Pending Advisory will be updated upon receipt of CVE SGI provides this information freely to the SGI user community for its consideration,...
