UBUNTU-CVE-2013-2041

Multiple cross-site scripting XSS vulnerabilities in ownCloud 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the 1 tag parameter to apps/bookmarks/ajax/addBookmark.php or 2 dir parameter to apps/files/ajax/newfile.php, which is passed to...

NTP Amplification DDoS Attacks Increasing

An ever-shrinking number of vulnerable network time protocol NTP servers are being used with customized distributed denial of service DDoS toolkits to perform increasingly potent NTP amplification attacks. According to the DDoS mitigation specialists at Prolexic, who issued a high alert DDoS atta...

Code injection

GnuTLS before 2.7.6, when the GNUTLSVERIFYALLOWX509V1CACRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different...

PT-2014-2516

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 5.0.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the new name parameter to the "apps/bookmarks/ajax/renameTag.php" API endpoint or multiple...

PT-2014-3568

Name of the Vulnerable Software and Affected Versions Serena Dimensions CM version 12.2 build 7.199.0 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that use the user new master parameter to the...

Fedora 19 : kernel-3.13.5-101.fc19 (2014-2887)

The 3.13.5 rebase contains support for additional hardware, some new features and a number of important bug fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Webuzo 2.1.3 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Webuzo Multiple Vulnerabilities Date: 7 October 2013 Exploit Author: Mahendra Vendor Homepage: www.webuzo.com Software Link: http://downloads.webuzo.com/va.php Version: 2.1.3, other version might be vulnerable. Tested on: CentOS...

New York Times Cross Site Scripting

================================================================================ Cross Site Scripting on New York Times ================================================================================ Site: www.nytimes.com Date: 25/02/2014 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal...

SOL15013 - OpenSSH vulnerability CVE-2011-0539

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy...

DEBIAN-CVE-2011-1835

The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps...

CVE-2011-1835

The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps...

CVE-2014-1837

Cross-site scripting XSS vulnerability in the StackIdeas Komento comkomento component before 1.7.4 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors related to "checking new comments."...

Cross site scripting

Cross-site scripting XSS vulnerability in the StackIdeas Komento comkomento component before 1.7.4 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors related to "checking new comments."...

CVE-2014-1837

Cross-site scripting XSS vulnerability in the StackIdeas Komento comkomento component before 1.7.4 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors related to "checking new comments."...

PT-2014-4321

Name of the Vulnerable Software and Affected Versions Komento versions prior to 1.7.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is related to vectors involving the checking of new comments. Recommendations For...

CVE-2014-1837: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the StackIdeas Komento comkomento component before 1.7.4 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors related to "checking new comments."...

Ubuntu Update for mysql-5.5 USN-2086-1

Check for the Version of mysql-5.5 OpenVAS Vulnerability Test $Id: gbubuntuUSN20861.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for mysql-5.5 USN-2086-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

CVE-2013-6412

The transformsave function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors...

USN-2086-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.1.73 in Ubuntu 10.04 LTS. Ubuntu 12.04 LTS, Ubuntu 12.10, and Ubuntu 13.10 have been updated to MySQL 5.5.35. In addition to security fixes, the...

Juniper Networks Junos OS DoS Vulnerability in XNM Command Processor

Denial of Service vulnerability in XNM command processor. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...