483 matches found
Low: Red Hat Security Advisory: mod_nss security, bug fix, and enhancement update
An update for modnss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
codeigniter -- multiple vulnerabilities
The CodeIgniter changelog reports: Fixed a number of new vulnerabilities in Security Library method xssclean...
The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The use of this function after release in CERTDestroyCertificate in libnss3.so within the NSS library suite from Mozilla for Firefox, Firefox ESR, and Thunderbird allows malicious remote actors to execute arbitrary code by improperly deleting the NSSCertificate structure from the trusted domain...
The vulnerability of the SeaMonkey software allows a malicious attacker to compromise protected information.
The vulnerability exists in the certTestHostName function in lib/certdb/certdb.c, which is part of the certificate validation mechanism in the Mozilla NSS library. It stems from groups of characters embedded in the U-label for internationalized domain names. Exploiting this vulnerability allows...
BELL-CVE-2015-4599 CVE-2015-4599 does not affect BellSoft software
Bulletin has no description...
[SECURITY] Fedora 24 Update: mod_nss-1.0.12-4.fc24
The modnss module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL and Transport Layer Security TLS protocols using the Network Security Services NSS security library...
nss: Heap buffer overflow vulnerability in ASN1 certificate parsing (MFSA 2016-35)
A heap-based buffer overflow flaw was found in the way NSS parsed certain ASN.1 structures. An attacker could use this flaw to create a specially crafted certificate which, when parsed by NSS, could cause it to crash, or execute arbitrary code, using the permissions of the user running an...
Mozilla Network Security Services Buffer Overflow Vulnerability
Mozilla Network Security Services is a library that provides cross-platform support for SSL, S/MIME and other Internet security standards. A buffer overflow vulnerability in the parsing of ASN.1 structures by Mozilla Network Security Services could be exploited by a remote attacker to construct a...
USN-2882-1 curl vulnerability
Isaac Boukris discovered that curl could incorrectly re-use NTLM proxy credentials when subsequently connecting to the same host...
[SECURITY] Fedora 22 Update: mod_nss-1.0.11-6.fc22
The modnss module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL and Transport Layer Security TLS protocols using the Network Security Services NSS security library...
CVE-2016-0423
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Enterprise Infrastructure SEC...
XSS attack vector in Security Library method xss_clean()
More info at https://www.codeigniter.com/userguide/changelog.htmlversion-3-0-3...
XSS attack vector in Security Library method xss_clean()
More info at https://www.codeigniter.com/userguide/changelog.htmlversion-3-0-3...
UBUNTU-CVE-2015-4872
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security...
codeigniter -- multiple XSS vulnerabilities
The CodeIgniter changelog reports: Fixed a number of XSS attack vectors in Security Library method xssclean thanks to Frans Rosén from Detectify...
USN-2659-1 cups-filters vulnerabilities
Petr Sklenar discovered that the cups-filters texttopdf filter incorrectly handled line sizes. A remote attacker could use this issue to cause a denial of service, or possibly execute arbitrary code as the lp user. CVE-2015-3258, CVE-2015-3279...
The vulnerability of the XML Security Library, related to bypassing authentication through spoofing, allows attackers to compromise data integrity.
The vulnerability of the XML Security Library relates to the bypassing of authentication mechanisms through spoofing. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...
USN-2472-1 unzip vulnerabilities
Wolfgang Ettlinger discovered that unzip incorrectly handled certain malformed zip archives. If a user or automated system were tricked into processing a specially crafted zip archive, an attacker could possibly execute arbitrary code...
UBUNTU-CVE-2014-1569
The definitelengthdecoder function in lib/util/quickder.c in Mozilla Network Security Services NSS before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long...
Multiple packages, Multiple vulnerabilities fixed in 2011
Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. FMOD Studio PEAR Mail LVM...