Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6795. Reason: This candidate is a duplicate of CVE-2013-6795. A typo in an external publication caused this ID to be associated with the wrong vulnerability. Notes: All CVE users should reference CVE-2013-6795 instead of this...

[SECURITY] [DSA 2902-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2902-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 13, 2014 http://www.debian.org/security/faq -...

CURL-CVE-2014-0138 wrong reuse of connections

libcurl can in some circumstances reuse the wrong connection when asked to do transfers using other protocols than HTTP and FTP. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of...

Icinga -- buffer overflow in classic web interface

The Icinga Team reports: Wrong strlen check against MAXINPUTBUFFER without taking '\0' into account...

SuSE 11.2 / 11.3 Security Update : curl (SAT Patch Numbers 8796 / 8797)

This update fixes the re-use of wrong HTTP NTLM connections in libcurl. CVE-2014-0015 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

CVE-2013-5596

The cycle collection CC implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for release of an image object, which allows remote attackers to execute arbitrary code or cause a denial ...

Evolution / libcamel messages encryption vulnerabilities

Under some conditions messages are encrypted with wrong key...

UBUNTU-CVE-2013-4300

The scmcheckcreds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing...

Google Mail - Mail Encoding & Filter Validation Vulnerability

Document Title: =============== Google Mail - Mail Encoding & Filter Validation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1051 View: http://www.youtube.com/watch?v=ZQJPgLQ1wcU Release Date: ============= 2013-08-15 Vulnerability Laboratory ID VL-ID:...

Google Mail - Mail Encoding & Filter Validation Vulnerability

Document Title: =============== Google Mail - Mail Encoding & Filter Validation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1051 View: http://www.youtube.com/watch?v=ZQJPgLQ1wcU Release Date: ============= 2013-08-15 Vulnerability Laboratory ID VL-ID:...

PT-2020-7479 · Gnome +3 · Gnome Evolution +4

Name of the Vulnerable Software and Affected Versions: GNOME Evolution versions 3.8.4 and earlier Evolution Data Server versions 3.9.5 and earlier Description: The issue is related to the gpg ctx add recipient function, which does not properly select the GPG key for email encryption. This might...

kernel: net: incorrect SCM_CREDENTIALS passing

The scmsetcred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application...

Vulnerability in core server (CVE-2013-0255)

executing enumrecv with wrong parameters crashes server...

UBUNTU-CVE-2013-1580

The dissectcmstatustlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service infinite loop via a malform...

Carefully timed redirects can allow cross site scripting – Opera Security Advisories

Scripts on a page are supposed to be restricted so that they can only interact with other pages from the same domain and security context. Carefully timed redirects can cause scripts to execute in the wrong security context in Opera. This allows cross site scripting XSS...

CVE-2012-0848

Heap-based buffer overflow in the wssnddecodeframe function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service application crash via a crafted media file, related to an incorrect calculation, aka "wrong samples count."...

CVE-2012-0848

Heap-based buffer overflow in the wssnddecodeframe function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service application crash via a crafted media file, related to an incorrect calculation, aka "wrong samples count."...

Mandriva Update for busybox MDVSA-2012:129-1 (busybox)

Check for the Version of busybox OpenVAS Vulnerability Test Mandriva Update for busybox MDVSA-2012:129-1 busybox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Scientific Linux Security Update : pam_krb5 on SL5.x i386/x86_64

A flaw was found in pamkrb5. In some non-default configurations specifically, those where pamkrb5 would be the first module to prompt for a password, the text of the password prompt varied based on whether or not the username provided was a username known to the system. A remote attacker could us...

Skype privacy bug that can Send Messages To The Wrong Contacts

What if when you sent a message to someone, it had a very good chance of going to someone else in your contact list? That would be pretty scary right? That what some Skype users are reporting. The bug was first discussed in Skype's user forums, and seems to have followed a June 2012 update of the...