Debian DSA-2942-1 : typo3-src - security update

Multiple security issues have been discovered in the Typo3 CMS. More information can be found in the upstream advisory: http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-co re-sa-2014-001/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

[SECURITY] [DSA 2942-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2942-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff Jun 01, 2014 http://www.debian.org/security/faq -...

Security fix for the ALT Linux 7 package kernel-src-kvm version 3.10.21-alt8

3.10.21-alt8 built May 15, 2014 Led in task 119612 May 13, 2014 Led - updates from linux-3.10.40: + KVM: ioapic: fix assignment of ioapic-rtcstatus.pendingeoi CVE-2014-0155...

PT-2014-4325

Name of the Vulnerable Software and Affected Versions Titan FTP Server versions prior to 10.40 build 1829 Description The issue allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. dot dot in the src parameter. This is a result of a directory traversal...

PT-2014-4327

Name of the Vulnerable Software and Affected Versions Titan FTP Server versions prior to 10.40 build 1829 Description The issue allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. dot dot in the src parameter. This is a director...

PT-2014-1485

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 28.0 SeaMonkey version 2.25 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service by painting on a CANVAS element, resulting in an out-of-bounds write and application cras...

CVE-2014-1843: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. dot dot in the src parameter...

CVE-2014-1841: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. dot dot in the src parameter...

CVE-2014-2994

Stack-based buffer overflow in Acunetix Web Vulnerability Scanner WVS 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL src attribute...

CVE-2014-2994: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Acunetix Web Vulnerability Scanner WVS 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL src attribute...

PT-2014-5009

Name of the Vulnerable Software and Affected Versions Acunetix Web Vulnerability Scanner WVS version 8 build 20120704 Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This can be achieved by using an HTML file that contains an IMG...

java-1.6.0-openjdk security and bug fix update

1:1.6.0.1-5.1.13.3 - updated to icedtea 1.13.3 - updated to openjdk-6-src-b31-15apr2014 - renmoved upstreamed patch7, 1.13fixes.patch - Resolves: rhbz1085009...

Security fix for the ALT Linux 7 package kernel-src-kvm version 3.10.21-alt5

March 4, 2014 Led 3.10.21-alt5 - updates from linux-3.10.33: + kvm: x86: fix emulator buffer overflow CVE-2014-0049...

PT-2014-2674

Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 2.2.0 release candidate 1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the src or username parameter to the "index.php" endpoint. Recommendations For...

CVE-2013-3294: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow remote attackers to execute arbitrary SQL commands via the 1 src or 2 username parameter to index.php...

CVE-2014-1485

The Content Security Policy CSP implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote attackers to execute arbitrary XSLT code by leveraging insufficient...

CVE-2014-1485: Undefined Security Weakness

The Content Security Policy CSP implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote attackers to execute arbitrary XSLT code by leveraging insufficient...

PT-2014-1161

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 SeaMonkey versions prior to 2.24 Description The issue is related to errors in the implementation of the MPostWriteBarrier class, allowing remote attackers to cause a denial of service or possibly execute...

PT-2014-1146

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 SeaMonkey versions prior to 2.24 Description The Content Security Policy CSP implementation operates on XSLT stylesheets according to style-src directives instead of script-src directives. This might allo...

PT-2014-3012

Name of the Vulnerable Software and Affected Versions Atmail Webmail Server versions prior to 7.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via the body of an e-mail message. This can be demonstrated by the SRC attribute of an IFRAME element, enabling...