7404 matches found
CentOS 6 : libreoffice (CESA-2015:1458)
Updated libreoffice packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...
Oracle Linux 7 : clutter (ELSA-2015-1510)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1510 advisory. 1.14.4-12.1 - Fix crash when doing gestures at unlock screen Resolves: rhbz1227103 Tenable has extracted the preceding description block directly from the Oracl...
RHEL 7 : clutter (RHSA-2015:1510)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1510 advisory. Clutter is a library for creating fast, visually rich, graphical user interfaces. Clutter is used for rendering the GNOME desktop environment. A flaw...
clutter: screenlock bypass by performing certain mouse gestures
A flaw was found in the way clutter processed certain mouse and touch gestures. An attacker could use this flaw to bypass the screen lock...
Moderate: Red Hat Security Advisory: clutter security update
Updated clutter packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fro...
XSS vulnerability in OFBiz forms
https://issues.apache.org/jira/browse/OFBIZ-6506 In Ofbiz form need to escape characters from description column in a display-entity tag to avoid XSS attacks. display-entity entity-name="Table" description="$description" I tried to use bsh, as following: display-entity entity-name="Table"...
PT-2015-6099 · Open Source +2 · Clutter +2
Name of the Vulnerable Software and Affected Versions: Clutter versions prior to 1.16.2 Description: The issue concerns the gesture handling code, allowing physically proximate attackers to bypass the lock screen via certain mouse or touch gestures. Recommendations: For versions prior to 1.16.2,...
clutter security update
1.14.4-12.1 - Fix crash when doing gestures at unlock screen Resolves: rhbz1227103...
Moderate: Red Hat Security Advisory: libreoffice security, bug fix, and enhancement update
Updated libreoffice packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...
用友多个系统通用漏洞设计缺陷(自带已保存的口令)
简要描述： 详细说明： 默认密码 其实是根本不用输入密码，账号密码自动保存，点确认就登入了、 导致 源码泄露 可调试 源码 这套 系统很多套用友系统都带着，具体请看 WooYun: 用友多个系统通用漏洞导致接口信息泄露引发多数据库信息泄露（涉及多个大型厂商） 然后从这个得来的灵感 http://gpms.foton.com.cn/uapws/ http://erp.suning.com.cn/uapws/ http://fm2.cscec.com/uapws/ http://bap.ufida.com/uapws/ http://61.178.99.236:9002/uapws/...
Amazon Patches Certificate Vulnerabilities in Fire Phones
Amazon last week patched three vulnerabilities in its Fire smartphones, including two in its Certinstaller package that put devices at risk. An attacker could take advantage of the vulnerability in the package, which allows mobile apps to install certificates on Amazon Fire devices without user...
Important: Red Hat Security Advisory: virtio-win security and bug fix update
An updated virtio-win package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Important: Red Hat Security Advisory: virtio-win security and bug fix update
An updated virtio-win package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
SUSE SLED12 / SLES12 Security Update : tigervnc (SUSE-SU-2014:1592-1)
This update for tigervnc provides the following fixes : - Fixed integer overflow flaw, leading to a heap-based buffer overflow in screen size handling. CVE-2014-8240 - Send correctly keys that don't type any characters, such as CTRL+Space. bnc906922 Note that Tenable Network Security has extracte...
Norton Internet Security NBNS Response Processing Stack Overflow - Ver2 (CVE-2004-0444)
Norton Internet Security is a security solution produced by Symantec corporation. If the Firewall component allows traffic on port 137/UDP, this traffic will be parsed as NetBIOS Name Service messages. There exists a vulnerability in the Symantec Firewall product line. A specially crafted NetBIOS...
The vulnerability of Google Chrome browser allows a malicious intruder to perform actions that are not intended by the browser interface.
The vulnerability of Google Chrome lies in the improper handling of screen events by the user when navigating through web pages. As a result of exploiting this vulnerability, an attacker who operates remotely, using a specially crafted website that implements a “tapjacking” attack, can perform...
gtk+ protection bypass
Screen lock bypass...
Ali security research labs: IIS server vulnerability analysis-vulnerability warning-the black bar safety net
4 on 1 to 5 November, in Microsoft's patch day, Microsoft released a more high-risk vulnerabilities, one of MS15-0 3 4 vulnerability that affects most widely, will cause the IIS server to blue screen crash, special circumstances or lead to information disclosure. Alibaba security research...
The IIS server vulnerability analysis-vulnerability warning-the black bar safety net
4 on 1 to 5 November, in Microsoft's patch day, Microsoft released a more high-risk vulnerabilities, one of MS15-0 3 4 vulnerability that affects most widely, will cause the IIS server to blue screen crash, special circumstances or lead to information disclosure. Alibaba security research...
