DSA-2504-1 libspring-2.5-java - information disclosure

Bulletin has no description...

[BSA-074] Security update for libreoffice

Rene Engelhard uploaded new packages for libreoffice which fixed the following security problem: CVE-2012-1149 Integer overflows in PNG image handling For the squeeze-backports distribution the problems have been fixed in version 1:3.4.6-2bpo60+2...

[SECURITY] [DSA 2480-3] request-tracker3.8 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2480-3 [email protected] http://www.debian.org/security/ Florian Weimer June 07, 2012 http://www.debian.org/security/faq -...

DSA-2487-1 openoffice.org - buffer overflow

Bulletin has no description...

DSA-2485-1 imp4 - cross site scripting

Bulletin has no description...

DSA-2484-1 nut - denial of service

Bulletin has no description...

Debian Security Advisory DSA 2475-1 (openssl)

The remote host is missing an update to openssl announced via advisory DSA 2475-1. OpenVAS Vulnerability Test $Id: deb24751.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2475-1 openssl Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2473-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 2473-1. OpenVAS Vulnerability Test $Id: deb24731.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2473-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...

Debian Security Advisory DSA 2472-1 (gridengine)

The remote host is missing an update to gridengine announced via advisory DSA 2472-1. OpenVAS Vulnerability Test $Id: deb24721.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2472-1 gridengine Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2480-2 (request-tracker3.8)

The remote host is missing an update to request-tracker3.8 announced via advisory DSA 2480-2. OpenVAS Vulnerability Test $Id: deb24802.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2480-2 request-tracker3.8 Authors: Thomas Reinke Copyright: Copyright c 20...

[BSA-071] Security Update for request-tracker4

Dominic Hargreaves uploaded new packages for request-tracker4 which fixed the following security problems: CVE-2011-2082 The vulnerable-passwords scripts introduced for CVE-2011-0009 failed to correct the password hashes of disabled users. CVE-2011-2083 Several cross-site scripting issues have be...

DSA-2479-1 libxml2 - off-by-one

Bulletin has no description...

Debian DSA-2475-1 : openssl - integer underflow

It was discovered that openssl did not correctly handle explicit Initialization Vectors for CBC encryption modes, as used in TLS 1.1, 1.2, and DTLS. An incorrect calculation would lead to an integer underflow and incorrect memory access, causing denial of service application crash. %NASLMINLEVEL...

Debian DSA-2472-1 : gridengine - privilege escalation

Dave Love discovered that users who are allowed to submit jobs to a Grid Engine installation can escalate their privileges to root because the environment is not properly sanitized before creating processes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Debian DSA-2473-1 : openoffice.org - buffer overflow

Tielei Wang discovered that OpenOffice.org does not allocate a large enough memory region when processing a specially crafted JPEG object, leading to a heap-based buffer overflow and potentially arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

Axous 1.1.1 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

+-----------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

[SECURITY] [DSA 2469-1] linux-2.6 security update

---------------------------------------------------------------------- Debian Security Advisory DSA-2469-1 [email protected] http://www.debian.org/security/ Dann Frazier May 10, 2012 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

Debian DSA-2468-1 : libjakarta-poi-java - unbounded memory allocation

It was discovered that Apache POI, a Java implementation of the Microsoft Office file formats, would allocate arbitrary amounts of memory when processing crafted documents. This could impact the stability of the Java virtual machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

DSA-2465-1 php5 - several

Bulletin has no description...

Debian Security Advisory DSA 2444-1 (tryton-server)

The remote host is missing an update to tryton-server announced via advisory DSA 2444-1. OpenVAS Vulnerability Test $Id: deb24441.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2444-1 tryton-server Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft...