DEBIAN-CVE-2018-7284

A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the respjsippubsub module stores the accepted formats present in the Accept headers of the request. Th...

PT-2014-7299

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions prior to 12.5.1 Description The issue allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package. This is related to the res pjsip pubs...

AST-2014-009: Remote crash based on malformed SIP subscription requests

Asterisk Project Security Advisory - AST-2014-009 Product Asterisk Summary Remote crash based on malformed SIP subscription requests Nature of Advisory Remotely triggered crash of Asterisk Susceptibility Remote authenticated sessions Severity Major Exploits Known No Reported On 30 July, 2014...

PT-2012-1859

Name of the Vulnerable Software and Affected Versions ejabberd versions 2.1.8 through 3.0.0-alpha-3 Description The issue allows remote authenticated users to cause a denial of service, resulting in an infinite loop. This occurs when a stanza with a publish tag lacks a node attribute, specificall...

Safari 4.0.5 Update

Installed version of Safari on remote host is older than 4.0.5 and contains security vulnerabilities. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...

Safari 4.0.5 Update

Installed version of Safari on remote host is older than 4.0.5 and contains security vulnerabilities. One or more of the following components are affected: PubSub WebKit OpenVAS Vulnerability Test Safari 4.0.5 Update LSS-NVT-2010-010 Developed by LSS Security Team Copyright C 2010 LSS This progra...

CVE-2010-0044

PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a 1 RSS or 2 Atom feed...

CVE-2010-0044

PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a 1 RSS or 2 Atom feed...

CVE-2010-0044

PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a 1 RSS or 2 Atom feed...

CVE-2010-0044

CVE-2010-0044 affects Apple Safari (PubSub/WebKit). The vulnerability occurs in Safari prior to version 4.0.5 where the Accept Cookies preference is not respected for cookies set via RSS/Atom feeds, enabling remote servers to track users. Impact is user tracking through feed-delivered cookies; th...

Apple Releases Safari 4.0.5

Apple has released Safari 4.0.5 to address multiple vulnerabilities in ColorSync, ImageIO, PubSub, Safari, and WebKit. These vulnerabilities may allow a remote attacker to execute arbitrary code, cause a denial-of-service condition, obtain sensitive information, or bypass security restrictions...

Apple Plugs 16 Safari Security Holes

Apple has shipped a new version of its Safari browser to plug multiple serious security vulnerabilities. The Safari 4.0.5 update, available for Mac OS X and Windows, fixes flaws that could lead to remote code execution if a user is tricked into surfing to a maliciously rigged Web site. In all, th...