squid security update

CentOS Errata and Security Advisory CESA-2017:0182 An update for squid is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

squid34 security update

CentOS Errata and Security Advisory CESA-2017:0183 An update for squid34 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 6 : squid34 (RHSA-2017:0183)

An update for squid34 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

squid: Information disclosure in HTTP request processing

It was found that squid did not properly remove connection specific headers when answering conditional requests using a cached request. A remote attacker could send a specially crafted request to an HTTP server via the squid proxy and steal private data from other connections...

SUSE-SU-2017:0128-1 Security update for squid

This update for squid fixes the following issues: - CVE-2016-10003: Prevent incorrect forwarding of cached private responses when Collapsed Forwarding feature is enabled. This allowed remote attacker proxy user to discover private and sensitive information about another user bsc1016169. -...

FreeBSD : squid -- multiple vulnerabilities (41f8af15-c8b9-11e6-ae1b-002590263bf5)

Squid security advisory 2016:10 reports : Due to incorrect comparison of request headers Squid can deliver responses containing private data to clients it should not have reached. This problem allows a remote attacker to discover private and sensitive information about another clients browsing...

CVE-2016-10002

It was found that squid did not properly remove connection specific headers when answering conditional requests using a cached request. A remote attacker could send a specially crafted request to an HTTP server via the squid proxy and steal private data from other connections...

Squid 3.5.x < 3.5.23, 4.0.x < 4.0.17 Information Disclosure Vulnerability (SQUID-2016:10) - Windows

Squid is prone to an information disclosure vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

squid -- multiple vulnerabilities

Squid security advisory 2016:10 reports: Due to incorrect comparison of request headers Squid can deliver responses containing private data to clients it should not have reached. This problem allows a remote attacker to discover private and sensitive information about another clients browsing...

Moodle 2.9.x < 2.9.9 Multiple Vulnerabilities

Binary data 9834.prm...

Override Access Vulnerability in Journalx 2.0, a Remote Processing System for Journal Manuscripts

Journalx 2.0 is an independently developed platform for remote processing of journal manuscripts developed by Beijing Magtech. Journalx 2.0 is vulnerable to an override access vulnerability. The vulnerability can be exploited by an attacker to gain access to other users' usernames, passwords, and...

Debian Security Advisory DSA 3731-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5181 A cross-site scripting issue was discovered. CVE-2016-5182 Giwan Go discovered a heap overflow issue. CVE-2016-5183 A use-after-free issue was discovered in the pdfium library. CVE-2016-5184 Another...

Google Chrome V8 Unauthorized Access Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. Google V8 Engine is one of the open source JavaScript engine. An unauthorized access vulnerability exists in Google Chrome V8. An attacker can exploit this vulnerability to access private property information...

CVE-2016-6721

An information disclosure vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without...

moodle -- multiple vulnerabilities

Marina Glancy reports: MSA-16-0023: Question engine allows access to files that should not be available MSA-16-0024: Non-admin site managers may accidentally edit admins via web services MSA-16-0025: Capability to view course notes is checked in the wrong context MSA-16-0026: When debugging is...

Racer App has information leakage vulnerability

Racer is a camera and self sharing app. Racer APP has an information leakage vulnerability due to its lack of effective checksum on INTENT. An attacker can directly access to any user's private information, including personal data, private works and messages...

Multiple vulnerabilities in IBM WebSphere Commerce (CNVD-2016-10442)

IBM WebSphere Commerce is a suite of e-commerce solutions from IBM in the United States. The solution supports all sales business models, including B2C, B2B and B2B2C, on a single customer interaction platform. There are information disclosure vulnerabilities and denial of service vulnerabilities...

Gesture Lock Vulnerability in Your Money Management Android Client

You and I loan is an Internet financial investment platform. It provides users with convenient, low-threshold personal loans and investment services. There is a vulnerability in the gesture lock of YouMeLoan's financial management Android client, which allows attackers to bypass a layer of...

Renren Android client gesture lock vulnerability

Renren focuses on personal mortgage business and is committed to providing professional financial information services for individuals and small and medium-sized enterprises. A vulnerability in the gesture lock of Renren Caixuan's Android client allows an attacker to bypass a layer of...

kibana: Session hijack via stealing cookies and auth headers from log ESA-2016-04

A flaw was found in Kibana's logging functionality. If custom logging output was configured in Kibana, private user data could be written to the Kibana log files. A system attacker could use this data to hijack sessions of other users when using Kibana behind some form of authentication such as...