3297 matches found
MGASA-2014-0299 Updated mariadb package fixes security vulnerabilities
This update provides MariaDB 5.5.38, which fixes several security issues and other bugs...
MGASA-2014-0297 Updated avidemux packages fix security issues in the bundles ffmpeg
Updated avidemux packages fix security vulnerabilities: Avidemux built with a bundled set of FFmpeg libraries. The bundled FFmpeg versions have been updated to 0.9.4 in Mageia 3 and 1.2.7 in Mageia 4 to fix several security issues and other bugs fixed upstream in FFmpeg. For the Mageia 3 update,...
Dell SonicWALL Scrutinizer Multiple Security Vulnerabilities
Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the 2 userid parameter in the changeUnit function, 3 methodDeta...
Aardvark Topsites 4.1 PHP Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9231/info Multiple vulnerabilities have been identified in the software that include information disclosure, path disclosure, SQL injection, and a plaintext password weakness. Aardvark Topsites PHP version 4.1.0 has been...
Trend Micro DirectPass 1.5.0.1060 - Multiple Software Vulnerabilities
No description provided by source...
best software saleslogix 2000.0 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11450/info Best Software SalesLogix is affected by multiple vulnerabilities. These issues are due to design errors that reveal sensitive information, access control validation issues that allow unauthorized access and inp...
Oracle / Sun / MySQL / PeopleSoft / OpenJDK applications multiple security vulnerabilities
Quarterly update fixes 144 different vulnerabilities...
MGASA-2014-0194 Updated otrs packages fix multiple vulnerabilities
Updated otrs package fixes security vulnerabilities: A logged in attacker could insert special content in dynamic fields, leading to JavaScript code being executed in OTRS CVE-2014-2553. An attacker could embed OTRS in a hidden iframe tag of another page, tricking the user into clicking links in...
Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20140409-asa)
The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - An issue exists in the Adaptive Security Device Manager ADSM due to improper privilege assignment to users with a privilege level of zero. This issue allows an authenticated, remote attacker to gain...
ICS Vulnerabilities Afffect Critical Infrastructure Security
Industrial control systems manufacturer, Siemens, has released new versions of its SIMATIC S7-1200 CPU family, resolving six security vulnerabilities in that product, and its SIMATIC S7-1200 PLC programmable logic controller, resolving an addition two vulnerabilities there. These patches are...
MGASA-2014-0113 Updated mediawiki packages fix security vulnerabilities
MediaWiki user Michael M reported that the fix for CVE-2013-4568 allowed insertion of escaped CSS values which could pass the CSS validation checks, resulting in XSS CVE-2013-6451. Chris from RationalWiki reported that SVG files could be uploaded that include external stylesheets, which could lea...
CVE-2012-6620
Multiple cross-site scripting XSS vulnerabilities in the 1 tasks and 2 search views in Horde Kronolith H4 before 3.0.17 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
quagga security vulnerabilities
OSPF parsing buffer overflow, BGP DoS...
MGASA-2013-0336 Updated krb5 package fixes security vulnerabilities
An authenticated remote client can cause a KDC to crash by making a valid TGS-REQ to a KDC serving a realm with a single-component name. The processtgsreq function dereferences a null pointer because an unusual failure condition causes a helper function to return success CVE-2013-1417. If a KDC...
PolarSSL multiple security vulnerabilities
DoS, buffer overflows, timing attacks...
CVE-2013-5849 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-8-openj9...
CVE-2013-5844 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-8-openj9...
CVE-2013-5810 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-8-openj9...