CVE-2013-7066: Undefined Security Weakness

The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit permissions to a node that references a private node...

PT-2014-4275

Name of the Vulnerable Software and Affected Versions Symantec PGP Desktop versions 10.0.x through 10.2.x Symantec Encryption Desktop Professional versions 10.3.x before 10.3.2 MP1 Description The issue is related to improper memory copy operations, which can be exploited by remote attackers usin...

PT-2014-4276

Name of the Vulnerable Software and Affected Versions Symantec PGP Desktop versions 10.0.x through 10.2.x Symantec Encryption Desktop Professional versions 10.3.x before 10.3.2 MP1 Description The issue is related to the improper performance of block-data moves, which can be exploited by remote...

Buffer overflow

vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service read access violation and system crash via a crafted buffer in an IOCTL call. NOTE: the researcher reports "Vendor rated issue as...

PT-2013-6363

В маршрутизаторе D–Link DSR–500 всем пользователям дано право чтения системного файла паролей...

Oracle Linux 3 : net-snmp (ELSA-2009-1124)

From Red Hat Security Advisory 2009:1124 : Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Simple Network Management Protocol SNMP is a...

CVE-2013-0798 : World read and write access to app_tmp directory on Android

Fourteenforty Research Institute, Inc. Security Advisory World read and write access to apptmp directory on Firefox for Android 2013/04/02 === Summary === World read and write access to apptmp directory on Firefox for Android allows replacing Firefox add-ons. === Severity === Middle === Affected...

FreeBSD : mozilla -- multiple vulnerabilities (94976433-9c74-11e2-a9fc-d43d7e0c7c02)

The Mozilla Project reports : MFSA 2013-30 Miscellaneous memory safety hazards rv:20.0 / rv:17.0.5 MFSA 2013-31 Out-of-bounds write in Cairo library MFSA 2013-32 Privilege escalation through Mozilla Maintenance Service MFSA 2013-33 World read and write access to apptmp directory on Android MFSA...

Design/Logic Flaw

Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not properly manage privileges for WebDAV repositories, which allows remote authenticated users to read, modify, or delete arbitrary site-wide repositories by leveraging certain read access...

VulnCheck KEV: CVE-2013-0158

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

CVE-2013-0158

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

PT-2013-2140

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.498 Jenkins LTS versions prior to 1.480.2 Jenkins Enterprise versions 1.447.x prior to 1.447.6.1 Jenkins Enterprise versions 1.466.x prior to 1.466.12.1 Description The issue allows remote attackers to obtain the...

CVE-2013-0158: Undefined Security Weakness

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

Solaris 10 (x86) : 148769-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Text Utilities. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized read...

UBUNTU-CVE-2012-6102

lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments aka feedback comments of arbitrary users via a crafted URI...

JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started

JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a...

Microsoft Internet Explorer 9.x <= Remote Stack Overflow PoC

Exploit for windows platform in category dos / poc ---------------------------------------------------------------------- Microsoft Internet Explorer 9.x Vendor: Microsoft Internet Explorer 9.x and below Description: The application is prone to a remote stack overflow vulnerability. Successful...

CVE-2012-5672

Microsoft Excel Viewer aka Xlview.exe and Excel in Microsoft Office 2007 aka Office 12 allow remote attackers to cause a denial of service read access violation and application crash via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data...

Design/Logic Flaw

Microsoft Excel Viewer aka Xlview.exe and Excel in Microsoft Office 2007 aka Office 12 allow remote attackers to cause a denial of service read access violation and application crash via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data...

CVE-2012-5672

Microsoft Excel Viewer aka Xlview.exe and Excel in Microsoft Office 2007 aka Office 12 allow remote attackers to cause a denial of service read access violation and application crash via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data...