Debian Security Advisory DSA 3554-1 (xen - security update)

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-3158, CVE-2016-3159 XSA-172 Jan Beulich from SUSE discovered that Xen does not properly handle writes to the hardware FSW.ES bit when...

DSA-3554-1 xen - security update

Bulletin has no description...

New MIT Scanner Finds Web App Flaws in a Minute

A new web application security scanner, developed by a former MIT student now Berkeley postdoctoral researcher, could be a real find for developers wishing to lock down bugs that live outside the OWASP top 10. The static-analysis tool is called Space and will be unveiled at the upcoming...

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10727)

Juniper Networks Junos Space is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] [DSA 3551-1] fuseiso security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3551-1 [email protected] https://www.debian.org/security/ Florian Weimer April 16, 2016 https://www.debian.org/security/faq -...

Juniper Networks Junos Space Has Multiple Vulnerabilities

Juniper Networks Junos Space is a suite of network management solutions. Juniper Networks Junos Space suffers from cross-site scripting, default password, information disclosure vulnerabilities, and command injection vulnerabilities that could be exploited by a remote attacker to execute arbitrar...

The vulnerability of the Silverlight software platform, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the Silverlight software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially crafted web page...

The vulnerability of the Business Process Manager system and the WebSphere Process Server server, which allows attackers to bypass existing access restrictions and create arbitrary pages.

The vulnerability of the Business Space component of the WebSphere Process Server business process server and the Business Process Manager automation system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions...

The vulnerability of the Silverlight software platform, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the Silverlight software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially crafted web page...

kernel: pipe buffer state corruption after unsuccessful atomic read from pipe

It was found that the fix for CVE-2015-1805 incorrectly kept buffer offset and buffer length in sync on a failed atomic read, potentially resulting in a pipe buffer state corruption. A local, unprivileged user could use this flaw to crash the system or leak kernel memory to user space...

CVE-2016-1006

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection mechanism via JIT data...

UBUNTU-CVE-2016-1006

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection mechanism via JIT data...

flash-plugin: multiple code execution issues fixed in APSB16-10

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection mechanism via JIT data...

Linux ASLR Disablement Vulnerability

Linux ASLR address space layout randomization is a set of mechanisms for controlling memory address randomization in Linux systems. A security vulnerability exists in the Linux ASLR implementation. An attacker can exploit this vulnerability by setting the RLIMITSTACK resource to 'unlimited' to...

[SECURITY] Fedora 22 Update: vtun-3.0.3-15.fc22

VTun provides a method for creating Virtual Tunnels over TCP/IP networks and allows one to shape, compress, and encrypt traffic in those tunnels. Supported types of tunnels are: PPP, IP, Ethernet and most other serial protocols and programs. VTun is easily and highly configurable: it can be used...

[SECURITY] Fedora 23 Update: vtun-3.0.3-15.fc23

VTun provides a method for creating Virtual Tunnels over TCP/IP networks and allows one to shape, compress, and encrypt traffic in those tunnels. Supported types of tunnels are: PPP, IP, Ethernet and most other serial protocols and programs. VTun is easily and highly configurable: it can be used...

[SECURITY] Fedora 24 Update: vtun-3.0.3-15.fc24

VTun provides a method for creating Virtual Tunnels over TCP/IP networks and allows one to shape, compress, and encrypt traffic in those tunnels. Supported types of tunnels are: PPP, IP, Ethernet and most other serial protocols and programs. VTun is easily and highly configurable: it can be used...

Space 1999 - Games for Kids - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Space 1999 - Games for Kids published at the 'play' market has multiple vulnerabilities...

Space mission (app for kids) - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Space mission app for kids published at the 'play' market has multiple vulnerabilities...

Space Rockets and Wormholes - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Space Rockets and Wormholes published at the 'play' market has multiple vulnerabilities...