Fedora Update for rubygem-i18n FEDORA-2013-23062

Check for the Version of rubygem-i18n OpenVAS Vulnerability Test Fedora Update for rubygem-i18n FEDORA-2013-23062 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 20 Update: rubygem-i18n-0.6.4-3.fc20

Ruby Internationalization and localization solution...

EMC Connectrix Manager Converged Network Edition远程代码执行漏洞

Bugtraq ID:64242 CVE ID:CVE-2013-6810 EMC Connectrix是一款网络交换机解决方案，EMC Connectrix Manager提供Connectrix server的接口，可对设备进行管理和保护。 EMC Connectrix Manager不正确限制对某些Servlet的访问，允许远程攻击者利用漏洞提交特殊的请求，可获取敏感文件信息，操作数据或执行任意代码。 0 EMC Connectrix Manager 12.x 厂商补丁： EMC ----- EMC Connectrix Manager Converged Network...

RedHat Update for libjpeg-turbo RHSA-2013:1803-01

Check for the Version of libjpeg-turbo OpenVAS Vulnerability Test RedHat Update for libjpeg-turbo RHSA-2013:1803-01 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

openSUSE: Security Advisory for ca-certificates-mozilla (openSUSE-SU-2013:1870-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Bio Basespace SDK 0.1.7 API Key Exposure

The Bio Basespace SDK 0.1.7 Ruby Gem API client code passes the APIKEY to a curl command. This exposes the api key to the shell and process table. Another user on the system could snag the api key by just monitoring the process table. Title: Bio Basespace SDK 0.1.7 Ruby Gem exposes API Key via...

MS13-101: Description of the security update for Windows kernel-mode drivers: December 10, 2013

None None...

MS13-098: Vulnerability in Windows could allow remote code execution: December 10, 2013

None None...

MS13-104: Vulnerability in Microsoft Office could allow information disclosure: December 10, 2013

Describes a security update that addresses a vulnerability by helping to make sure that Microsoft Office software correctly handles specially crafted responses from websites.INTRODUCTIONMicrosoft has released security bulletin MS13-104. To view the complete security bulletin, go to one of the...

SQL Injection in appRain

Advisory ID: HTB23177 Product: appRain Vendor: appRain Vulnerable Versions: 3.0.2 and probably prior Tested Version: 3.0.2 Advisory Publication: October 9, 2013 without technical details Vendor Notification: October 9, 2013 Public Disclosure: November 6, 2013 Vulnerability Type: SQL Injection...

SQL Injection in Dokeos

Advisory ID: HTB23181 Product: Dokeos Vendor: Dokeos Vulnerable Versions: 2.2 RC2 and probably prior Tested Version: 2.2 RC2 Advisory Publication: October 30, 2013 without technical details Vendor Notification: October 30, 2013 Public Disclosure: November 27, 2013 Vulnerability Type: SQL Injectio...

Cross-Site Scripting (XSS) in Tweet Blender Wordpress Plugin

Advisory ID: HTB23180 Product: Tweet Blender Wordpress Plugin Vendor: kirilln Vulnerable Versions: 4.0.1 and probably prior Tested Version: 4.0.1 Advisory Publication: October 25, 2013 without technical details Vendor Notification: October 25, 2013 Vendor Patch: November 13, 2013 Public Disclosur...

Remote Code Execution in Microweber

Advisory ID: HTB23175 Product: Microweber Vendor: Microweber Vulnerable Versions: 0.8 and probably prior Tested Version: 0.8 Advisory Publication: September 25, 2013 without technical details Vendor Notification: September 25, 2013 Vendor Patch: September 26, 2013 Public Disclosure: October 16,...

[PT-2013-46] Local File Include in Nagios Looking Glass

----------------------------------------------------------- PT-2013-46 Positive Technologies Security Advisory Local File Include in Nagios Looking Glass ----------------------------------------------------------- --- Vulnerable software Nagios Looking Glass Version: 1.1.0 beta 2 and earlier Link...

openSIS 5.2 PHP Code Injection Vulnerability

openSIS versions 4.5 through 5.2 suffer from a remote PHP code injection vulnerability. ---------------------------------------------------------- openSIS = 5.2 ajax.php PHP Code Injection Vulnerability ---------------------------------------------------------- - Software Link:...

WordPress PhotoSmash Galleries Plugin - Arbitrary File Upload

PhotoSmash Galleries plugin is prone to an arbitrary file upload vulnerability via "bwbps-uploader.php". It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the plugin...

WordPress Firefox Adsense Plugin <= 3.0 - CSRF and XSS

Because of this vulnerability in askapache-firefox-adsense.php, the attackers can hijack the authentication of administrators for requests that conduct cross-site scripting attacks. Solution Update the plugin...

OpenCart 1.5.6 File Upload / XSS / Path Disclosure

--479758653-844428858-1386184016=:70324 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable = =0A Title: Opencart Multiple Vulnerabilities=0A Vendor: http://www.openca= rt.com=0A Vulnerabilities: Arbitrary File Upload, XSS, Path Disclosure=0A= Vulnerable Version:...

Fedora 20 : kernel-3.11.10-300.fc20 (2013-22531)

Update to last upstream 3.11 stable release, 3.11.10. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

VMware ESXi and ESX patches address a guest privilege escalation (VMSA-2013-0014) - Remote Version Check

VMware ESXi and ESX patches address a vulnerability in the LGTOSYNC.SYS driver which could result in a privilege escalation on older Windows-based Guest Operating Systems. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...