CVE-2015-7519

agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an underscore character instead of a -...

UBUNTU-CVE-2015-7519

agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an underscore character instead of a -...

CVE-2015-7519

agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an underscore character instead of a -...

OpenMRS Reporting Module 0.9.7 - Remote Code Execution

Title: Unauthenticated remote code execution in OpenMRS Product: OpenMRS Vendor: OpenMRS Inc. Tested versions: See summary Status: Fixed by vendor Reported by: Brian D. Hysell Product description: OpenMRS is "the world's leading open source enterprise electronic medical record system platform."...

OpenMRS Reporting Module 0.9.7 - Remote Code Execution

OpenMRS Reporting Module 0.9.7 - Remote Code Execution Title: Unauthenticated remote code execution in OpenMRS Product: OpenMRS Vendor: OpenMRS Inc. Tested versions: See summary Status: Fixed by vendor Reported by: Brian D. Hysell Product description: OpenMRS is "the world's leading open source...

[SECURITY] Fedora 22 Update: thunderbird-38.4.0-1.fc22

Mozilla Thunderbird is a standalone mail and newsgroup client...

Cumulative update for Windows 10 Version 1511: November 24, 2015

None None...

[SECURITY] Fedora 21 Update: thunderbird-38.1.0-1.fc21

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 22 Update: thunderbird-31.7.0-1.fc22

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 20 Update: thunderbird-31.7.0-1.fc20

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 21 Update: thunderbird-31.7.0-1.fc21

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 20 Update: thunderbird-31.6.0-1.fc20

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 20 Update: thunderbird-31.4.0-1.fc20

Mozilla Thunderbird is a standalone mail and newsgroup client...

KLA10452 Multiple vulnerabilities in VMware products

Multiple serious vulnerabilities have been found in VMware products. Malicious users can exploit these vulnerabilities to gain privileges or cause denial of service. Below is a complete list of vulnerabilities 1. Vectors related to file write can be exploited locally; 2. Improper input validation...

Microsoft-Office-2003-HomePro

Exploit: Microsoft Office 2003 Home/Pro 0day - Tested on XP SP1,2.3 Authors: b33f Ruben Boonen g11tch Chris Hodges import binascii filename = "evil.doc" ----------------------------------------------------------------------------------- File Structure...

Tape Inventory With: "Unknown media (possibly in use by another application)."

Challenge A tape inventory or catalog operation fails with the following error: Cannot inventory tape in Drive 1 Server: , Library: , Drive ID: TapeX. Unknown media possibly in use by another application. Cause This error is shown when Veeam Backup & Replication does not recognize the MTF header ...

Code injection

The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...

CVE-2014-0995

SAP NetWeaver Enqueue Server (Standalone Enqueue Server) is affected. Specifically, SAP NetWeaver 7.01 and 7.20 (and earlier) expose a denial-of-service vulnerability triggered by a crafted Trace Pattern with wildcards, causing uncontrolled recursion and a crash. The vulnerability affects the Sta...

CVE-2014-8072

The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin...

CVE-2014-8071

Multiple cross-site scripting XSS vulnerabilities in OpenMRS 2.1 Standalone Edition allow remote attackers to inject arbitrary web script or HTML via the 1 givenName, 2 familyName, 3 address1, or 4 address2 parameter to registrationapp/registerPatient.page; the 5 comment parameter to...