13685 matches found
Ubuntu 12.04 LTS / 12.10 / 13.10 : cups-filters vulnerabilities (USN-2143-1)
Florian Weimer discovered that cups-filters incorrectly handled memory in the urftopdf filter. An attacker could possibly use this issue to execute arbitrary code with the privileges of the lp user. This issue only affected Ubuntu 13.10. CVE-2013-6473 Florian Weimer discovered that cups-filters...
Yokogawa CENTUM CS 3000 - 'BKHOdeq.exe' Remote Buffer Overflow (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Yokogawa CENTUM CS 3000 BKHOdeq.exe Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow in Yokoga...
Fedora 20 : v8-3.14.5.10-6.fc20 (2014-3222)
Common Vulnerabilities and Exposures assigned an identifier CVE-2013-6650 to the following vulnerability : Name: CVE-2013-6650 URL: https://vulners.com/cve/CVE-2013-6650 The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before...
Fedora 19 : kernel-3.13.5-103.fc19 (2014-3448)
This kernel update contains a number of CVE fixes, all users are encouraged to update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...
Ubuntu 12.04 LTS : linux-lts-saucy vulnerabilities (USN-2137-1)
An information leak was discovered in the Linux kernel when built with the NetFilter Connection Tracking NFCONNTRACK support for IRC protocol NFNATIRC. A remote attacker could exploit this flaw to obtain potentially sensitive kernel information when communicating over a client- to-client IRC...
Fedora 20 : rubygem-actionpack-4.0.0-2.fc20 (2013-23636)
Includes security patches for : - CVE-2013-6417 - Incomplete fix to CVE-2013-0155 Unsafe Query Generation Risk - CVE-2013-4491 - Reflective XSS Vulnerability in Ruby on Rails - CVE-2013-6415 - XSS Vulnerability in numbertocurrency - CVE-2013-6414 - Denial of Service Vulnerability in Action View -...
Fedora 20 : kernel-3.13.5-202.fc20 (2014-3442)
This kernel update contains a number of CVE fixes, all users are encouraged to update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...
CVE-2013-5468
CVE-2013-5468 affects IBM Algo One usage in MetaData Management Tools (UDS 4.7.0–5.0.0) and AlgoWeb components (ACSWeb 4.7.0–4.9.0; AlgoWebApps 5.0.0). The common issue is that login requests are not encrypted, enabling remote attackers to sniff sensitive data on the network. Connected documents ...
Novell ZENworks Configuration Management < 11.3.0.35304 PreBoot Service Directory Traversal
The remote host has a version of Novell ZENworks Configuration Management installed prior to 11 SP3 11.3.0.35304. It is, therefore, affected by a directory traversal vulnerability due to improper validation of an unspecified parameter of the PreBoot Service when reading files. A remote,...
[WirelessKeyView] Recover lost wireless network key
WirelessKeyView recovers all wireless network security keys/passwords WEP/WPA stored in your computer by the 'Wireless Zero Configuration' service of Windows XP or by the 'WLAN AutoConfig' service of Windows Vista, Windows 7, Windows 8, and Windows Server 2008. It allows you to easily save all ke...
GnuTLS certificate verification security vulnerability found
GnuTLS, an open source SSL and TLS implementation used in hundreds of software packages including Red Hat desktop and server products and all Debian and Ubuntu Linux distributions, is the latest crypto package to improperly verify digital certificates as authentic. The vulnerability, discovered a...
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : php5 vulnerabilities (USN-2126-1)
Bernd Melchers discovered that PHP's embedded libmagic library incorrectly handled indirect offset values. An attacker could use this issue to cause PHP to consume resources or crash, resulting in a denial of service. CVE-2014-1943 It was discovered that PHP incorrectly handled certain values whe...
Fedora 19 : xen-4.2.4-2.fc19 (2014-2862)
32-bit fix for 'Guest triggerable AMD CPU erratum may cause host hang', xen-4.2.4 also fixes XSA-60, CVE-2013-2212 update to xen-4.2.4 use-after-free in xccpupoolgetinfo under memory pressure Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
[Ncrack] High-Speed Network Authentication Cracker
Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed using a...
Barracuda Networks Firewall Bug Bounty #32 - Filter Bypass & Persistent Web Vulnerabilities
Document Title: =============== Barracuda Networks Firewall Bug Bounty 32 - Filter Bypass & Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1069 Barracuda Networks Security ID BNSEC: BNSEC-2069 Release Date: =============...
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : freeradius vulnerabilities (USN-2122-1)
It was discovered that FreeRADIUS incorrectly handled unix authentication. A remote user could successfully authenticate with an expired password. CVE-2011-4966 Pierre Carrier discovered that FreeRADIUS incorrectly handled rlmpap hash processing. An authenticated user could use this issue to caus...
Fedora 19 : mingw-gnutls-3.1.21-1.fc19 (2014-2565)
Version 3.1.21 released 2014-02-13 - libgnutls: Tolerate servers that sent the SUPPORTED ECC extension. - libgnutls: Reduced the TLS and DTLS version requirements for all ciphersuites that are not GCM. - libgnutls: When two initial keywords are specified then treat the second as having the '+'...
Apple Fixes Certificate Validation Flaw in iOS
Apple on Friday quietly pushed out a security update to iOS that restores some certificate-validation checks that had apparently been missing from the operating system for an unspecified amount of time. Apple released iOS 7.06 on Friday and the only content in the update was a small security fix...
Apple Releases Security Updates for iOS devices and Apple TV
Apple has released updates for iOS and Apple TV devices to address a vulnerability that allows an attacker with a privileged network position to capture or modify data in protected SSL/TLS sessions. Updates are available: iOS 6.1.6 for iPhone 3GS and iPod touch 4th generation. iOS 7.0.6 for iPhon...
Ubuntu 12.04 LTS / 12.10 / 13.10 : thunderbird vulnerabilities (USN-2119-1)
Christian Holler, Terrence Cole, Jesse Ruderman, Gary Kwong, Eric Rescorla, Jonathan Kew, Dan Gohman, Ryan VanderMeulen and Sotaro Ikeda discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker...