sat-universe.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-439857 Description| Value ---|--- Affected Website:| sat-universe.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

NetMove SaAT Personal Installer Remote Code Execution Vulnerability

NetMove SaAT Personal is a suite of products from the Japanese company NetMove that provides security protection.Installer is the installation program for it. A remote code execution vulnerability exists in NetMove SaAT Personal Installer 1.0.10.272 and earlier versions. A remote attacker could...

Meteo Sat - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Meteo Sat published at the 'play' market has multiple vulnerabilities...

tv8.ch XSS vulnerability

Vulnerable URL: http://www.tv8.ch/tv8/channel/168/3-SAT/now%22%3E%3Csvg%20onload=alert%28%27XSSPOSED%27%29%3E/33/journey/1/progview=1?search=asd Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

tv8.ch XSS vulnerability

Vulnerable URL: http://www.tv8.ch/tv8/channel/168/3-SAT/now/33%22%3E%3Csvg%20onload=alert%28%27XSSPOSED%27%29%3E/journey/1/progview=1?search=asd Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

tv8.ch XSS vulnerability

Vulnerable URL: http://www.tv8.ch/tv8/channel/168/3-SAT/now/33/journey/1%22%3E%3Csvg%20onload=alert%28%27XSSPOSED%27%29%3E/progview=1?search=asd Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

SuSE 11.3 Security Update : gd (SAT Patch Number 10530)

The graphics drawing library gd has been updated to fix one security issue : - possible buffer read overflow CVE-2014-9709 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11.3 Security Update : emacs (SAT Patch Number 10519)

Emacs has been updated to fix the following issues : - Several cases of insecure usage of temporary files. CVE-2014-3421 / CVE-2014-3422 / CVE-2014-3423 / CVE-2014-3424 - Use of vc-annotate for renamed files when using Git. bnc854683 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.3 Security Update : coreutils (SAT Patch Number 10620)

Coreutils was updated to fix one security issue and one non-security bug. The following vulnerability was fixed : - Commands such as date, touch or using parsedatetime could, when accepting untrusted input, allow an attacker to crash the application or, potentially, execute arbitrary code...

SuSE 11.3 Security Update : mutt (SAT Patch Number 10435)

The mutt mail client has been updated to fix a heap-based buffer overflow in muttsubstrdup. CVE-2014-9116 Additionally, a patch has been added to allow users to override the 'From' address when executing mutt in batch mode. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

SuSE 11.3 Security Update : Xen (SAT Patch Number 10560)

The Virtualization service XEN was updated to fix various bugs and security issues. The following security issues have been fixed : - XSA-126: Unmediated PCI command register access in qemu could have lead to denial of service attacks against the host, if PCI cards are passed through to guests...

SuSE 11.3 Security Update : tcpdump (SAT Patch Number 10509)

When running tcpdump, a remote unauthenticated user could have crashed the application or, potentially, execute arbitrary code by injecting crafted packages into the network. The following vulnerabilities in protocol printers have been fixed : - IPv6 mobility printer remote DoS. CVE-2015-0261,...

SuSE 11.3 Security Update : libssh2_org (SAT Patch Number 10426)

The ssh client library libssh2org was updated to fix a security issue : - A malicious server could send a crafted SSHMSGKEXINIT packet, that could lead to a buffer overread and to a crash of the application using libssh2org. CVE-2015-1782 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.3 Security Update : MySQL (SAT Patch Number 10387)

The MySQL datebase server was updated to 5.5.42, fixing various bugs and security issues. More information can be found on : - http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5- 42.html - http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5- 41.html -...

SuSE 11.3 Security Update : util-linux (SAT Patch Number 10452)

util-linux has been updated to fix one security issue : - command injection flaw in blkid bnc907434. Additionally, these non-security issues have been fixed :. CVE-2014-9114 - Fix possible script hang. bnc888678 - Enable build of libmount / findmnt. bnc900965 - Don't stop trying filesystem when...

SuSE 11.3 Security Update : cups (SAT Patch Number 10394)

cups has been updated to fix one security issue : - A malformed compressed raster file can trigger a buffer overflow in cupsRasterReadPixels. bnc917799. CVE-2014-9679 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Su...

SuSE 11.3 Security Update : libmspack (SAT Patch Number 10402)

This update fixes the following security issue : - An integer overflow in the function qtmddecompress could have been exploited causing a denial of service endless loop bnc912214. CVE-2014-9556 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 10458)

flash-player has been updated to fix eleven security vulnerabilities : - Multiple memory corruption issues exist due to not properly validating user input, which an attacker can exploit to execute arbitrary code. CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339 - Multiple type confusion...

SuSE 11.3 Security Update : freetype2 (SAT Patch Number 10386)

The font rendering library freetype2 has been updated to fix various security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVE...

SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 10373)

Mozilla Firefox has been updated to version 31.5.0 ESR to fix five security issues. These security issues have been fixed : - Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.5 allowed remote attackers to cause a denial of service memory corruption and...