[SECURITY] Fedora 20 Update: ktux-4.14.1-1.fc20

KTux is a screensaver of outer space, with Tux in a spaceship flying by...

[SECURITY] Fedora 20 Update: kdf-4.14.1-1.fc20

KDiskFree displays the available file devices hard drive partitions, floppy and CD/DVD drives, etc. along with information on their capacity, free space, type and mount point...

[SECURITY] Fedora 20 Update: filelight-4.14.1-1.fc20

Filelight allows you to quickly understand exactly where your diskspace is being used by graphically representing your file system...

CoreGraphics Information Disclosure - CVE-2014-4378

This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fails to validate input when parsing the colorspace...

Apple Rolls Out iOS 8 with Bucket of Security Fixes

Apple has finally released iOS 8, the latest version of its operating system, for free to iPhone, iPad and iPod touch users. The company has assured that the latest iOS 8 update is a significant step away up from iOS 7. You can grab the new update through an over-the-air update accessible by goin...

PT-2014-6121

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 6.1.0 through 6.1.0.6 CF27 IBM WebSphere Portal versions 6.1.5 through 6.1.5.3 CF27 IBM WebSphere Portal versions 7.0.0 through 7.0.0.2 CF28 IBM WebSphere Portal versions 8.0.0 through 8.0.0.1 CF13 IBM WebSphere...

PT-2020-3488

Name of the Vulnerable Software and Affected Versions bson versions prior to 0.8 Description The issue is caused by an integer overflow due to the incorrect use of int instead of size t for many variables, parameters, and return values in the bson package. Specifically, the bson ensure space...

CVE-2014-5547

The Mahjong Galaxy Space Lite aka air.com.permadi.mahjongIris application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5547

CVE-2014-5547 affects the Mahjong Galaxy Space Lite app (Android, package air.com.permadi.mahjongIris) version 2.5. The vulnerability is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted cert...

CVE-2014-5547

The Mahjong Galaxy Space Lite aka air.com.permadi.mahjongIris application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6532

Name of the Vulnerable Software and Affected Versions The Mahjong Galaxy Space Lite aka air.com.permadi.mahjongIris version 2.5 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information v...

CVE-2014-5547: Undefined Security Weakness

The Mahjong Galaxy Space Lite aka air.com.permadi.mahjongIris application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Draft retrieval in the editor doesn't respect page or space permissions

Drafts are supposed to be per user and private but given a draft id, which should be easy to guess as they are sequential, you can access the contents of any draft, both for new and existing pages by using the following urls:...

Draft retrieval in the editor doesn't respect page or space permissions

Drafts are supposed to be per user and private but given a draft id, which should be easy to guess as they are sequential, you can access the contents of any draft, both for new and existing pages by using the following urls:...

ESA-2014-059: EMC Documentum Multiple Cross-Site Scripting Vulnerabilities

ESA-2014-059.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-059: EMC Documentum Multiple Cross-Site Scripting Vulnerabilities EMC Identifier: ESA-2014-059 CVE Identifier: CVE-2014-2511 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Affected products: • EMC WebTop...

PT-2014-3096

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM for Space Management versions 5.x through 6.1.5.5 on Solaris and HP-UX IBM Tivoli Storage Manager TSM for Space Management versions 5.x through 6.2.5.2 on Linux and AIX IBM Tivoli Storage Manager TSM for Space...

PT-2014-6432

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions prior to 2013.2.4 OpenStack Image Registry and Delivery Service Glance versions 2014.x prior to 2014.1.3 OpenStack Image Registry and Delivery Service Glance versions prior to Juno-...

Child pages permissions are not respected in Popular Tab

mfernandezbadii posted this on CONF-33207: quote I found that restricted child pages not the whole space, will still show on the Popular Tab. Example: User can browse a Space. Restricted page is created and user can't browse it or see it in the Popular Tab. Child page is created: User can't brows...

flash-plugin: multiple code execution or security bypass flaws (APSB14-18)

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly...

flash-plugin: multiple code execution or security bypass flaws (APSB14-18)

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly...