2849 matches found
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
CentOS Errata and Security Advisory CESA-2015:1667 Updated httpd packages that fix two security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...
amgen.ru XSS vulnerability
Vulnerable URL: http://www.amgen.ru/searchresults.jsp?searchSite=amgen-ru=searchresults.jsp=amgen=www.amgen.ru=" Details: Description| Value ---|--- Patched:| Yes, at 01.09.2015 Latest check for patch:| 01.09.2015 21:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
wikibit.me XSS vulnerability
Vulnerable URL: http://wikibit.me/mp3/ "autofocus/onfocus="confirm/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 28631 Google Pagerank| 0 VIP...
oz.by XSS vulnerability
Vulnerable URL: http://oz.by/personal/login.phtml?backuri=http://oz.by/xss" Details: Description| Value ---|--- Patched:| Yes, at 29.07.2015 Latest check for patch:| 29.07.2015 16:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31334 Google Pagerank| 5 VIP...
pagebin.com XSS vulnerability
Vulnerable URL: http://pagebin.com/directory/ Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 230240 Google Pagerank| 3 VIP website status:| No Check...
MacKeeper Zero Day Patched
MacKeeper, well known to Mac OS X users for its noisy pop-under ads stressing the need for a system cleanup, has patched a critical remote code execution vulnerability. The software is a utility that is marketed as capable of improving Mac performance and security. The vulnerability was disclosed...
onlinewelten.com XSS vulnerability
Vulnerable URL: http://www.onlinewelten.com/user/registrierung/?do=addmember=" Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 20:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31308 Google Pagerank| 5 VIP...
AntLabs InnGate security vulnerability patch
ANTLabs today is expected to roll out patches for a vulnerability in its InnGate Internet gateways that are popular in hospitality and convention locations. The gateways provide temporary Internet access to hotel guests or conference attendees using kiosks, for example. The vulnerability...
Schneider Electric Wonderware System Platform Vulnerabilities
OVERVIEW Ivan Sanchez of WiseSecurity Team has identified a fixed search path vulnerability in Schneider Electric’s Wonderware InTouch, Application Server, Historian, and SuiteLink applications, which are part of the Wonderware System Platform suite. Schneider Electric has produced a patch that...
MGASA-2015-0086 Updated cabextract packages fix CVE-2015-2060
A directory traversal issue in cabextract allows writing to locations outside of the current working directory, when extracting a crafted cab file that encodes the filenames in a certain manner CVE-2015-2060...
bziran.com XSS vulnerability
Vulnerable URL: http://www.bziran.com/adsregister.php?AdsID=1"RootByte Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 20:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100610 Google Pagerank| 0 VIP websit...
ManageEngine OpManager Applications Manager IT360 - FailOverServlet Multiple Vulnerabilities
ManageEngine OpManager Applications Manager IT360 - FailOverServlet Multiple Vulnerabilities Multiple vulnerabilities in FailOverServlet in ManageEngine OpManager, Applications Manager and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security...
Fedora 20 : php-5.5.21-1.fc20 (2015-1101)
22 Jan 2014, PHP 5.5.21 Core : - Upgraded cryptblowfish to version 1.3. Leigh - Fixed bug 60704 unlink bug with some files path. - Fixed bug 65419 Inside trait, self::class != CLASS. Julien - Fixed bug 65576 Constructor from trait conflicts with inherited constructor. dunglas at gmail dot com -...
Elipse SCADA Denial of Service Patch
Brazilian process management software developer Elipse has patched a serious denial-of-service vulnerability in its web-based Elipse SCADA application. The software is used in a number of critical industries worldwide, including manufacturing, energy, water and wastewater plants. The vulnerabilit...
MGASA-2014-0447 Updated libreoffice packages fix security vulnerabilities
It was discovered during routine code review that LibreOffice unconditionally executed certain VBA macros on loading Microsoft Office documents, contrary to user expectations CVE-2014-0247. A vulnerability in LibreOffice allows an attacker to send a document which when opened will trigger the...
MGASA-2014-0440 Updated pulseaudio package fixes RTP remote crash vulnerability
PulseAudio versions shipped in Mageia 3 and 4 were vulnerable to a remote RTP attack which could crash the PulseAudio server simply by sending an empty UDP packet. Additionally, the version of PulseAudio shipped in Mageia 4 was a pre-release version of PulseAudio v5 and has been updated to the...
The latest Bash vulnerability patch Junior programme-vulnerability warning-the black bar safety net
Bash broke the remote parsing command execution vulnerability, CVE-2 0 1 4-6 2 7 1, the spread of major Linux distributions and MacOSX systems. Vulnerability can be directly in the Bash support the Web CGI environment remote execution of arbitrary commands. bash is injected after the public...
Updated bash packages fix CVE-2014-7169
Updated bash packages fix security vulnerability: It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or...
pornhub.com XSS vulnerability
Vulnerable URL: http://www.pornhub.com/video/search?search=%22%2Fonload=alert'xssposed' Details: Description| Value ---|--- Patched:| Yes, at 23.10.2014 Latest check for patch:| 23.10.2014 16:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 75 Google Pagerank|...