47153 matches found
libxml2 memory corruption
Multiple vulnerabilities related to XPath processing...
conky symbolic links vulnerability
Insecure temporary files creation...
iDefense Security Advisory 10.11.11: Microsoft Internet Explorer Object Handling Memory Corruption Vulnerability
iDefense Security Advisory 10.11.11 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 11, 2011 I. BACKGROUND Internet Explorer is a graphical web browser developed by Microsoft Corp. that has been included with Microsoft Windows since 1995. For more information about Internet Explorer,...
SEC Consult SA-20111012-0 :: Client-side remote file upload & command execution in Microsoft Forefront UAG Remote Access Agent (CVE-2011-1969)
SEC Consult Vulnerability Lab Security Advisory 20111012-0 ======================================================================= title: Client-side remote file upload & command execution product: Microsoft Forefront Unified Access Gateway Remote Access Agent signed Java applet vulnerable versio...
CORE-2011-0106: Microsoft Publisher 2007 Pubconv.dll Memory Corruption
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ Microsoft Publisher 2007 Pubconv.dll Memory Corruption 1. Advisory Information Title: Microsoft Publisher 2007 Pubconv.dll Memory Corruption Advisory ID: CORE-2011-0106...
[ GLSA 201110-08 ] feh: Multiple vulnerabilities
Gentoo Linux Security Advisory GLSA 201110-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
[security bulletin] HPSBMU02710 SSRT100601 rev.1 - HP Onboard Administrator (OA), Remote Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03048779 Version: 1 HPSBMU02710 SSRT100601 rev.1 - HP Onboard Administrator OA, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as...
APPLE-SA-2011-10-11-1 iTunes 10.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-11-1 iTunes 10.5 iTunes 10.5 is now available and addresses the following: CoreFoundation Available for: Windows 7, Vista, XP SP2 or later Impact: A man-in-the-middle attack may lead to an unexpected application termination or arbitra...
Apple iTunes multiple security vulnerabilities
Multiple security vulnerabilities on different media formats parsing...
Microsoft Publisher memory corruption
Memory corruption on .pub files parsing...
Multiple G-WAN vulnerabilities
======================================================================== Title: Multiple G-WAN vulnerabilities Product: G-WAN http://gwan.com/ Author: Fredrik Widlund E-mail: fredrik.widlund at gmail dot com Date: 2011-10-12 ========================================================================...
G-WAN Web server buffer overflow
Buffer overflow on request processing...
Apple iPhone multiple security vulnerabilities
Multiple vulnerabilities in different system components and applications...
Apple TV multiple security vulnerabilities
SSL vulnerabilities, vulnerabilities in different media formats parsing...
APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4 Apple TV Software Update 4.4 is now available and addresses the following: Apple TV Available for: Apple TV 4.0 through 4.3 Impact: An attacker with a privileged network position may intercept user...
wget unsafe files creation
Local file is created with server controlled filename...
HP Onboard Administrator unauthorized access
No description provided...
OpenSSL security vulnerabilities
DoS, protection bypass...
APPLE-SA-2011-10-12-3 OS X Lion v10.7.2 and Security Update 2011-006
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-3 OS X Lion v10.7.2 and Security Update 2011-006 OS X Lion v10.7.2 and Security Update 2011-006 is now available and addresses the following: Apache Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7 and...
Quassel IRC client weak permissions
Weak permissions for user's files and directories...
Apple Safari / WebKit multiple security vulnerabilities
Crossite scripting, multiple memory corruption, code execution...
[USN-1230-1] Quassel vulnerability
========================================================================== Ubuntu Security Notice USN-1230-1 October 14, 2011 quassel vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
APPLE-SA-2011-10-12-4 Safari 5.1.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...
APPLE-SA-2011-10-12-5 Pages for iOS v1.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-5 Pages for iOS v1.5 Pages for iOS v1.5 is now available and addresses the following: Pages Available for: iOS Impact: Opening a maliciously crafted Microsoft Word document may lead to an unexpected application termination or...
APPLE-SA-2011-10-12-6 Numbers for iOS v1.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-6 Numbers for iOS v1.5 Numbers for iOS v1.5 is now available and addresses the following: Numbers Available for: iOS Impact: Opening a maliciously crafted Excel file may lead to an unexpected application termination or arbitrary co...
APPLE-SA-2011-10-12-1 iOS 5 Software Update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-1 iOS 5 Software Update iOS 5 Software Update is now available and addresses the following: CalDAV Available for: iOS 3.0 through 4.3.5 for iPhone 3GS and iPhone 4, iOS 3.1 through 4.3.5 for iPod touch 3rd generation and later, iOS...
Microsoft .Net / Silverlight code execution
It's possible to escape from sandbox...
Microsoft Host Integration Server DoS
Uninitialized pointer dereference, endless loop...
PHP multiple security vulnerabilities
Memory corruptions in different functions...
[ GLSA 201110-06 ] PHP: Multiple vulnerabilities
Gentoo Linux Security Advisory GLSA 201110-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
[ MDVSA-2011:144 ] apache
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:144 http://www.mandriva.com/security/ Package : apache Date : September 8, 2011 Affected: 2009.0, 2010.1, 2011., Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and corrected i...
Microsoft Windows multiple security vulnerabilities
Active Accessibility and Media Center insecure DLL loading...
Cisco Network Admission Control Manager directory traversal
HTTPS directory traversal...
ark archiver directory traversal
Directory traversal during archive extraction...
VMWare buffer overflow
Buffer overflow on UDF file system import...
Secunia Research: Autonomy Keyview Ichitaro Object Reconstruction Logic Vulnerability
====================================================================== Secunia Research 07/10/2011 - Autonomy Keyview - - Ichitaro Object Reconstruction Logic Vulnerability - ====================================================================== Table of Contents Affected...
[SECURITY] [DSA 2318-1] cyrus-imapd-2.2 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-2318-1 [email protected] http://www.debian.org/security/ Nico Golde Oct 6, 2011 http://www.debian.org/security/faq -...
Anatomy Keyview multiple security vulnerabilities
Memory corruption, integer overflow, buffer overflow...
Cisco Security Advisory: Directory Traversal Vulnerability in Cisco Network Admission Control Manager
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Directory Traversal Vulnerability in Cisco Network Admission Control Manager Advisory ID: cisco-sa-20111005-nac Revision 1.0 For Public Release 2011 October 05 1600 UTC GMT...
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module Advisory ID: cisco-sa-20111005-fwsm Revision 1.0 For Public Release 2011 October 05 1600 UTC GMT +-------------------------------------------------------------------...
Secunia Research: Cyrus IMAPd NTTP Authentication Bypass Vulnerability
====================================================================== Secunia Research 05/10/2011 - Cyrus IMAPd NTTP Authentication Bypass Vulnerability - ====================================================================== Table of Contents Affected...
Google Chrome security vulnerabilities
Memory corruption on WebKit functions...
Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM
I recently discovered that various Qt applications including KSSL the KDE class library responsible for SSL negotiation, Rekonq, Arora and Psi IM are vulnerable to UI spoofing due to their use of QLabel objects to render externally controlled security critical information. The primary area of...
cyrus-imapd nntp server security vulnerabilities
Buffer overflow, auuthentication bypass...
[ MDVSA-2011:143 ] rpm
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:143 http://www.mandriva.com/security/ Package : rpm Date : October 5, 2011 Affected: 2009.0, 2010.1, Enterprise Server 5.0 Problem Description: Multiple flaws were found in the way the RPM library parsed...
Secunia Research: Autonomy Keyview Ichitaro QLST Integer Overflow Vulnerability
====================================================================== Secunia Research 07/10/2011 - Autonomy Keyview Ichitaro QLST Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
Secunia Research: Autonomy Keyview Ichitaro Text Parsing Buffer Overflow
====================================================================== Secunia Research 07/10/2011 - Autonomy Keyview Ichitaro Text Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...
Medium severity flaw with Ark
I recently discovered that the Ark archiving tool is vulnerable to directory traversal via malformed. When attempts are made to view files within the malformed Zip file in Ark's default view, the wrong file may be displayed due to incorrect construction of the temporary file name. Whilst this doe...