Bugzilla < 4.0.11 / 4.2.7 / 4.4.1 Multiple Vulnerabilities

According to its banner, the version of Bugzilla installed on the remote host is affected by multiple vulnerabilities : - A cross-site request forgery vulnerability exists due to a flaw in token validation in 'processbug.cgi'. Note that this only affects versions 4.4rc1 to 4.4. CVE-2013-1733 - A...

CVE-2013-5176

The kernel in Apple Mac OS X before 10.9 does not properly handle integer values during unspecified tty device operations, which allows local users to cause a denial of service system hang by triggering a truncation error...

Design/Logic Flaw

The srandomdev function in Libc in Apple Mac OS X before 10.9, when the kernel random-number generator is unavailable, produces predictable values instead of the intended random values, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveragi...

CVE-2013-5176

CVE-2013-5176 affects Apple Mac OS X kernels prior to 10.9. The issue is in handling integer values during unspecified tty device operations, enabling a local attacker to trigger a truncation error that can cause a system hang (denial of service). The available connected sources reiterate the sam...

Debian DSA-2781-1 : python-crypto - PRNG not correctly reseeded in some situations

A cryptographic vulnerability was discovered in the pseudo random number generator in python-crypto. In some situations, a race condition could prevent the reseeding of the generator when multiple processes are forked from the same parent. This would lead it to generate identical output on all...

DEDECMS website management system template execution vulnerability-vulnerability warning-the black bar safety net

DEDECMS website management system template execution vulnerability One not careful, your server will be hacked, such as database password is too simple, the server password is too simple, or CMS system vulnerabilities. The following is a DEDE of the template execution vulnerability. Vulnerability...

PT-2013-1372 · Nist · Dual Ec Drbg

Name of the Vulnerable Software and Affected Versions: Dual Elliptic Curve Deterministic Random Bit Generation Dual EC DRBG algorithm affected versions not specified Description: The Dual Elliptic Curve Deterministic Random Bit Generation algorithm contains point Q constants that may have a...

How to Change the Settings Related to Veeam Backup & Replication Log Files

Purpose This article documents how to change settings regarding where log files are stored, how large an individual log file may become, and how many generations of log files are retained. Solution Log Files Stored on the Veeam Backup Server The following registry values must be created on the...

Design/Logic Flaw

IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors...

CVE-2013-4067

IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors...

IBM solidDB Stored Procedure Call Handling Denial of Service Vulnerability

IBM solidDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:soliddb";...

CVE-2013-5155

The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service infinite loop via an application that writes crafted values to /dev/random...

Marketing Firms Advertise Largely to Bots; Waste $9.5B

It may not come as a surprise that online advertising firms waste billions of dollars each year, but a new report claims that – even if you were to assume that the entire practice of targeting users with online ads is an effective and lucrative one – $9.5 billion this year will be wasted...

Mobile Atlas Creator 1.9.12 - Command Inject Vulnerability

Document Title: =============== Mobile Atlas Creator 1.9.12 - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=945 Release Date: ============= 2013-09-08 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2013-5708

Coursemill Learning Management System LMS 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605...

CVE-2013-2155

Apache Santuario XML Security for C++ aka xml-security-c before 1.7.1 does not properly validate length values, which allows remote attackers to cause a denial of service or bypass the CVE-2009-0217 protection mechanism and spoof a signature via crafted length values to the 1...

CVE-2013-2155

Apache Santuario XML Security for C++ aka xml-security-c before 1.7.1 does not properly validate length values, which allows remote attackers to cause a denial of service or bypass the CVE-2009-0217 protection mechanism and spoof a signature via crafted length values to the 1...

CVE-2013-2155

Apache Santuario XML Security for C++ aka xml-security-c before 1.7.1 does not properly validate length values, which allows remote attackers to cause a denial of service or bypass the CVE-2009-0217 protection mechanism and spoof a signature via crafted length values to the 1...

DEBIAN-CVE-2013-2175

HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdrip or other "hdr" functions with a negative occurrence count, allows remote attackers to cause a denial of service negative array index usage and crash via an HTTP header with a certain number of values, related to the...

haproxy: http_get_hdr()/get_ip_from_hdr2() MAX_HDR_HISTORY handling denial of service

HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdrip or other "hdr" functions with a negative occurrence count, allows remote attackers to cause a denial of service negative array index usage and crash via an HTTP header with a certain number of values, related to the...