This Simple Message Can Crash Skype Badly and Forces Re-Installation

Just last week iPhone and iPad users were dealing with an iOS text bug that caused the app to crash and iPhones to reboot, now a similar bug has been found that takes out Skype — the popular video chat and messaging service. Yes, Microsoft-owned Skype VoIP client is also affected by a bug that...

Serendipity cross-site scripting vulnerability (CNVD-2015-01957)

Serendipity is a PHP-based blogging system developed by Serendipity team. The system supports the creation of online journals, blogs, web pages and more. A cross-site scripting vulnerability exists in the templates/2k11/admin/entries.tpl file in Serendipity versions prior to 2.0.1. The...

PT-2015-6798 · Ntt +4 · Ntp +4

Name of the Vulnerable Software and Affected Versions: NTP versions prior to 4.2.7p112 Description: The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, via a crafted statistics or filegen configuration command that is not enabled during compilation...

qemu: virtio: buffer overrun on incoming migration

Array index error in the virtioload function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image...

[oss-security] CVE request: Drupal Flag 7.x-3.5 Module Vulnerability report: Arbitrary code execution due to improper input handling in flag importer

Good morning, Could a CVE please be assigned to http://seclists.org/fulldisclosure/2014/May/44 if one has not been already? Apart from version 7, drupal6-flag-2.1-1.fc20 looks affected - patch applies, but I did not test it. For an older version, drupal6-flag-1.3-3.fc19 appears unaffected. Cheers...

phpmyfaq -- multiple vulnerabilities

The phpMyFAQ team reports: An arbitrary script may be executed on the user's Internet Explorer when using an older version of the browser. If a user views a malicious page while logged in, settings may be changed unintentionally...

Mac OS X < 10.9 Multiple Vulnerabilities

Binary data 8040.prm...

Apple iOS < 7 Multiple Vulnerabilities

Binary data appleios70check.nbin...

PT-2013-2239 · Cloudbees +1 · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions prior to 1.502 Jenkins LTS versions prior to 1.480.3 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations: For versions prior to...

UBUNTU-CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

Nginx resolve the vulnerability principle and the use of methods-vulnerability warning-the black bar safety net

Nginx parses the vulnerability is already relatively old vulnerability, but on the Internet there are a lot of use there resolve the vulnerability the nginx version. Long time no write articles, go to sleep go to law customers turn a circle see a nginx vulnerability penetration of the article, on...

Apple iOS < 5.1.1 Multiple Vulnerabilities

Binary data appleios511check.nbin...

MySQL < 5.5.6 Multiple Denial of Service

The version of MySQL installed on the remote host is older than 5.5.6. As such, it reportedly is prone to multiple denial of service attacks : - The improper handling of type errors during argument evaluation in extreme-value functions, e.g., 'LEAST' or 'GREATEST' causes server crashes...

OrangeHRM 'PluginController.php' Local File Inclusion Vulnerability

This host is running with OrangeHRM and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: secpodorangehrmlfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ OrangeHRM 'PluginController.php' Local File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 20...

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578,...

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574,...

DEBIAN-CVE-2010-4523

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to 1 card-acos5.c, 2 card-atrust-acos.c, and 3 card-starcos.c...

PYSEC-2010-5

ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack...

Apple iTunes < 10.0 Multiple (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.0. Such versions are affected by numerous issues in the WebKit component. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid49086; scriptversion"1.13"; scriptcvsdate"Date: 2018/11/15...

PDF JBIG2 invalid free()

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data...