160 matches found
EUVD-2006-4818
Malware in sbrugna...
CVE-2025-1220
In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 some functions like fsockopen lack validation that the hostname supplied does not contain null characters. This may lead to other functions like parseurl treat the hostname in different way, thus openin...
PT-2025-12332
Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 10.1.0 through 10.1.34 Apache Tomcat versions 9.0.0 through 9.0.98 Description The issue concerns security problems that have been fixed in certain Apache Tomcat packages. Recommendations For Apache Tomcat versions 10.1....
RHEL 8 : kernel (RHSA-2024:6206)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6206 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel:TCP-spoofed ghost ACKs and leak...
RHEL 9 : kernel (RHSA-2024:5364)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5364 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: gfs2: Fix kernel NULL pointer...
PT-2024-41376
Name of the Vulnerable Software and Affected Versions MozillaFirefox versions 50.1.0 through 50.1.0 MozillaFirefox version 50.1.0 is already included in the above range, so it will not be listed separately. Description The issue concerns security problems that have been fixed in MozillaFirefox...
Demo of AES GCM Misuse Problems
This is really neat demo of the security problems arising from reusing nonces with a symmetric cipher in GCM mode...
Ross Anderson
Ross Anderson unexpectedly passed away Thursday night in, I believe, his home in Cambridge. I cant remember when I first met Ross. Of course it was before 2008, when we created the Security and Human Behavior workshop. It was well before 2001, when we created the Workshop on Economics and...
PT-2024-41382
Name of the Vulnerable Software and Affected Versions libopenconnect5 versions 8.10-2.6 and earlier Description The issue concerns security problems that have been fixed in the libopenconnect5 package. Recommendations For versions 8.10-2.6 and earlier, update the libopenconnect5 package to versio...
CentOS 7 : firefox (RHSA-2023:7509)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:7509 advisory. - On some systemsdepending on the graphics settings and driversit was possible to force an out-of-bounds read and leak memory data into the images...
RHEL 8 : thunderbird (RHSA-2023:7503)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:7503 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.5.0. Security Fixes: Mozilla:...
RHEL 7 : thunderbird (RHSA-2023:7505)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:7505 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.5.0. Security Fixes: Mozilla:...
CVE-2023-6209
The Mozilla Foundation Security Advisory describes this flaw as: Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. This could contribute to security problems in web sites...
Path traversal
Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and Thunderbird 115.5...
Mozilla Firefox < 115.5
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 115.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-50 advisory. - On some systemsdepending on the graphics settings and driversit was possible to force an out-of-bounds read...
Patch…later? Safari iLeakage bug not fixed
Apple has released updates for its phones, Macs, iPads, watches, and TV streaming devices, fixing a bunch of security problems. But amid all that activity, one fix is notably absent—there is nothing to address the vulnerability dubbed iLeakage. iLeakage is a side-channel attack that can force the...
PT-2022-31072
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential issue exists where a pointer is not properly set to NULL after being freed, which may lead to security problems. The actual impact and likelihood of an attack have not been...
Microsoft Patch Tuesday, May 2022 Edition
Microsoft today released updates to fix at least 74 separate security problems in its Windows operating systems and related software. This months patch batch includes fixes for seven "critical" flaws, as well as a zero-day vulnerability that affects all supported versions of Windows. By all...
CVE-2022-28552
Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin...
PT-2022-11104
Name of the Vulnerable Software and Affected Versions Telephony application affected versions not specified Description The telephony application has a SQL Injection issue. Successful exploitation of this issue may cause privacy and security problems. Recommendations At the moment, there is no...