47153 matches found
[USN-2593-1] Dnsmasq vulnerability
========================================================================== Ubuntu Security Notice USN-2593-1 May 04, 2015 dnsmasq vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...
[ MDVSA-2015:090 ] libpng
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:090 http://www.mandriva.com/en/support/security/ Package : libpng Date : March 28, 2015 Affected: Business Server 2.0 Problem Description: Updated libpng package fixes security vulnerabilities: The...
[ MDVSA-2015:092 ] net-snmp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:092 http://www.mandriva.com/en/support/security/ Package : net-snmp Date : March 28, 2015 Affected: Business Server 2.0 Problem Description: Updated net-snmp packages fix security vulnerabilities: Remotely...
snmplib / snmpd DoS
Multiple DoS conditions...
cabextract directory traversal
Directory traversal on files extraction...
[ MDVSA-2015:096 ] stunnel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:096 http://www.mandriva.com/en/support/security/ Package : stunnel Date : March 28, 2015 Affected: Business Server 2.0 Problem Description: Updated stunnel package fixes security vulnerability: A flaw was...
stunnel crypto vulnerabilities
Entropy pools are reused if fork if used for threading...
[ MDVSA-2015:077 ] python-numpy
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:077 http://www.mandriva.com/en/support/security/ Package : python-numpy Date : March 27, 2015 Affected: Business Server 2.0 Problem Description: Updated python-numpy packages fix security vulnerabilities: f2...
python-numpy symbolic links vulnerability
Symbolic links vulnerability on temporary files creation...
libarchive directory traversal
Directory traversal and symbolic links vulnerability in cpio implementation...
libpng security vulnerabilities
Few integer overflows lead to heap buffer overrun...
[ MDVSA-2015:066 ] cpio
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:066 http://www.mandriva.com/en/support/security/ Package : cpio Date : March 27, 2015 Affected: Business Server 1.0 Problem Description: Updated cpio package fixes security vulnerability: In GNU Cpio 2.11, t...
[ MDVSA-2015:064 ] cabextract
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:064 http://www.mandriva.com/en/support/security/ Package : cabextract Date : March 27, 2015 Affected: Business Server 1.0, Business Server 2.0 Problem Description: Updated cabextract packages fix security...
[ MDVSA-2015:134 ] pulseaudio
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:134 http://www.mandriva.com/en/support/security/ Package : pulseaudio Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated pulseaudio package fixes RTP remote crash vulnerability:...
CVE-2014-7954 MTP path traversal vulnerability in Android
MTP path traversal vulnerability in Android 4.4 ----------------------------------------------- doSendObjectInfo method of the MtpServer class implemented in frameworks/av/media/mtp/MtpServer.cpp does not validate the name parameter of the incoming MTP packet at all. It is possible to upload file...
TP-LINK devices unauthorized files access
Directory traversal in web interface...
pillow multiple security vulnerabilities
Symbolic links vulnerability, DoS, shell injection...
gtk+ protection bypass
Screen lock bypass...
[ MDVSA-2015:162 ] gtk+3.0
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:162 http://www.mandriva.com/en/support/security/ Package : gtk+3.0 Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated gtk+3.0 packages fix security vulnerability: Clemens Fries...
Shibboleth Service Provider DoS
Crash on parsing SAML message...
Apple Safari / Webkit multiple security vulnerabilities
Invalid SSL validation, information leakage, crossite access, memory corruptions...
SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)
SEC Consult Vulnerability Lab Security Advisory 20150410-0 ======================================================================= title: Unauthenticated Local File Disclosure product: Multiple TP-LINK products see Vulnerable / tested versions vulnerable version: Multiple see Vulnerable / tested...
cups-filters code execution
cups-browsed shell characters vulnerability...
[ MDVSA-2015:100 ] cups-filters
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:100 http://www.mandriva.com/en/support/security/ Package : cups-filters Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated cups-filters packages fix security vulnerabilities:...
[SECURITY] [DSA 3208-1] freexl security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3208-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 29, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3207-1] shibboleth-sp2 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3207-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 28, 2015 http://www.debian.org/security/faq -...
[ MDVSA-2015:141 ] not-yet-commons-ssl
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:141 http://www.mandriva.com/en/support/security/ Package : not-yet-commons-ssl Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated not-yet-commons-ssl packages fixes security...
Safari iOS/OS X/Windows cookie access vulnerability
OVERVIEW ========== The 4/8/2015 security updates from Apple included a patch for a Safari cross-domain vulnerability. An attacker could create web content which, when viewed by a target user, bypasses some of the normal cross-domain restrictions to access or modify HTTP cookies belonging to any...
112 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: 112 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges Advisory URL: https://pierrekim.github.io/advisories/2015-iptime-0x00.txt.asc Date published: 2015-04-17 Vendors contacted:...
CVE-2014-7951 adb backup archive path traversal file overwrite
ADB backup archive path traversal file overwrite ------------------------------------------------ Using adb one can create a backup of his/her Android device and store it on the PC. The backup archive is based on the tar file format. By modifying tar headers to contain ../../ like patterns it is...
HP Support Solution Framework security vulnerabilities
Code execution, information disclosure...
[security bulletin] HPSBGN03316 rev.1 - HP Support Solution Framework on Windows, Remote Execution of Code, Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04634535 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04634535 Version: 1 HPSBGN03316 rev....
util-linux blkid commands injection
No description provided...
[ MDVSA-2015:114 ] cifs-utils
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:114 http://www.mandriva.com/en/support/security/ Package : cifs-utils Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated cifs-utils packages fix security vulnerability: Sebastia...
[ MDVSA-2015:158 ] jython
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:158 http://www.mandriva.com/en/support/security/ Package : jython Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated jython packages fix security vulnerability: There are server...
CVE-2014-7953 Android backup agent code execution
Android backup agent arbitrary code execution --------------------------------------------- The Android backup agent implementation was vulnerable to privilege escalation and race condition. An attacker with adb shell access could run arbitrary code as the system 1000 user or any other valid...
Android multiple security vulnerabilities
Restrictions bypass, code execution...
freexl multiple security vulnerabilities
Multiple memory corruptions on Excel documents parsing...
dulwich security vulnerabilities
Code execution, buffer overflow...
[SECURITY] [DSA 3206-1] dulwich security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3206-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 28, 2015 http://www.debian.org/security/faq -...
Not Yet Commons SSL certificate spoofing
Insufficient certificate checking...
[ MDVSA-2015:099 ] python-pillow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:099 http://www.mandriva.com/en/support/security/ Package : python-pillow Date : March 28, 2015 Affected: Business Server 2.0 Problem Description: Updated python-imaging packages fix security vulnerabilities:...
[ MDVSA-2015:122 ] util-linux
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:122 http://www.mandriva.com/en/support/security/ Package : util-linux Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated util-linux packages fix security vulnerability: Sebastia...
PulseAudio DoS
Crash on empty UDP packet...
Jython weak permissions
Weak permissions on cache files creation...
cifs-utils buffer overflow
pamcifscreds buffer overflow...
Apple iOS multiple security vulnerabilities
Restrictions bypass, privilege escalation, headers spoofing, XXE, memory corruptions, information disclosure, DoS, traffic hijacking...
[CVE-2015-2810] Integer Overflow leading to heap corruption when assigning a long paragraph size value to a HanWord document
Product: Hancom Office Hwp 2014 Vendor: Hancom - www.hancom.com Versions Affected 32 bits only: HanWord Viewer 2007 Korean HanWord Viewer 2010 8.5.6.1158 English HwpViewer 2014 VP- 9.1.0.2186 English Hwp 2014 VP - 9.0.0.1405 English/Korean Version Not vulnerable: Hwp 2014 VP - 9.1.0.2342...
gst-plugins buffer overflow
Buffer overflow on MP4 playback...
[SECURITY] [DSA 3225-1] gst-plugins-bad0.10 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3225-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 15, 2015 http://www.debian.org/security/faq -...