47153 matches found
Apple iOS multiple security vulnerabilities
Restrictions bypass, privilege escalation, headers spoofing, XXE, memory corruptions, information disclosure, DoS, traffic hijacking...
[USN-2569-2] Apport vulnerability
========================================================================== Ubuntu Security Notice USN-2569-2 April 16, 2015 apport vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...
gst-plugins buffer overflow
Buffer overflow on MP4 playback...
Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities
Over 90 different vulnerabilities are fixed in quarterly update...
APPLE-SA-2015-04-08-3 iOS 8.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-04-08-3 iOS 8.3 iOS 8.3 is now available and addresses the following: AppleKeyStore Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A malicious application may be able to guess the user's...
Hancom Office memory corruption
Memory corruption on document parsing...
ESA-2015-069: EMC NetWorker Buffer Overflow Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-069: EMC NetWorker Buffer Overflow Vulnerability EMC Identifier: ESA-2015-069 CVE Identifier: CVE-2015-0530 Severity Rating: CVSS v2 Base Score: 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C Affected products: • All versions of NetWorker prior to the...
[SECURITY] [DSA 3228-1] ppp security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3228-1 [email protected] http://www.debian.org/security/ Sebastien Delafond April 16, 2015 http://www.debian.org/security/faq -...
libx11 / libxrender memory corruption
Memory corruption in MakeBigReq...
[SECURITY] [DSA 3225-1] gst-plugins-bad0.10 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3225-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 15, 2015 http://www.debian.org/security/faq -...
[USN-2568-1] libx11, libxrender vulnerability
========================================================================== Ubuntu Security Notice USN-2568-1 April 13, 2015 libx11, libxrender vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...
[SECURITY] [DSA 3222-1] chrony security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3222-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini April 12, 2015 http://www.debian.org/security/faq -...
less uninitialized memory reference
No description provided...
Apport privilege escalation
Invalid crash report handling...
[ MDVSA-2015:199 ] less
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:199 http://www.mandriva.com/en/support/security/ Package : less Date : April 10, 2015 Affected: Business Server 1.0, Business Server 2.0 Problem Description: Updated less package fixes security vulnerability...
chrony multiple security vulnerabilities
Memory corruption, uninitialized pointer dereference, DoS...
HP Network Automation multiple security vulnerabilities
XSS, CSRF, clickjacking...
ppp buffer overflow
Buffer overflow on RADIUS server response parsing...
inspircd security vulnerabilities
Buffer overflow, DoS...
[SECURITY] [DSA 3226-1] inspircd security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3226-1 [email protected] http://www.debian.org/security/ Sebastien Delafond April 15, 2015 http://www.debian.org/security/faq -...
Cisco Secure Desktop code execution
Code execution in the signed jar library...
Active Directory Federation Services information disclosure
Invalid session logoff...
[SYSS-2015-013] Panda Antivirus Pro 2015 - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-013 Product: Panda Antivirus Pro 2015 Vendor: Panda Security Affected Versions: 15.1.0 Tested Versions: 15.1.0 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level: Medium Solution...
[SYSS-2015-015] Panda Gold Protection 2015 - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-015 Product: Panda Gold Protection 2015 Vendor: Panda Security Affected Versions: 15.1.0 Tested Versions: 15.1.0 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level: Medium Solution...
[SYSS-2015-012] Panda Internet Security 2015 - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-012 Product: Panda Internet Security 2015 Vendor: Panda Security Affected Versions: 15.0.1 Tested Versions: 15.0.1 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level: Medium Solutio...
Secunia Research: Microsoft Windows GDI "MRSETDIBITSTODEVICE ::bPlay()" EMF Parsing Memory Corruption Vulnerability
====================================================================== Secunia Research 15/04/2015 Microsoft Windows GDI "MRSETDIBITSTODEVICE ::bPlay" EMF Parsing Memory Corruption Vulnerability ====================================================================== Table of Contents Affected...
Cisco IOS multiple security vulnerabilities
Multiple DoS conditions, code execution...
Microsoft Windows multiple security vulnerabilities
Multiple Internet Explorer vulnerabilities, VBScript engine, graphics, HTTP.sys vulnerabilities, privilege escalation, code execution, restrictions bypass, information disclosure, DoS...
Panda authentication bypass
Password is checked by client application...
Microsoft Office and Sharepoint multiple security vulnerabilities
Code execution, privilege escalation...
Apache multiple security vulnerabilities
modheaders restrictions bypass, modcache DoS, modlua restrictions bypass and DoS, modproxyfcgi DoS, modgnutls restrictions bypass...
[SYSS-2015-014] Panda Global Protection 2015 - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-014 Product: Panda Global Protection 2015 Vendor: Panda Security Affected Versions: 15.1.0 Tested Versions: 15.1.0 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level: Medium Solutio...
Microsoft Exchange crossite scripting
Multiple crossite scripting possibilities...
[ MDVSA-2015:184 ] setup
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:184 http://www.mandriva.com/en/support/security/ Package : setup Date : March 30, 2015 Affected: Business Server 2.0 Problem Description: Updated setup package fixes security vulnerability: An issue has been...
[security bulletin] HPSBGN03307 rev.1 - HP Intelligent Provisioning, Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04626732 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04626732 Version: 1 HPSBGN03307 rev....
[security bulletin] HPSBHF03310 rev.1 - HP Thin Clients running Windows Embedded Standard 7 (WES7) or Windows Embedded Standard 2009 (WES09) with HP Easy Deploy, Remote Elevation of Privilege, Execution of Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04629160 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04629160 Version: 1 HPSBHF03310 rev....
Mandriva Business Server weak permissions
Password files weak permissions...
[ MDVSA-2015:177 ] ctdb
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:177 http://www.mandriva.com/en/support/security/ Package : ctdb Date : March 30, 2015 Affected: Business Server 2.0 Problem Description: Updated ctdb packages fix security vulnerability: ctdb before 2.5 is...
[CORE-2015-0007] - Schneider Vampset Stack and Heap Buffer Overflow
Advisory Information Title: Schneider Vampset Stack and Heap Buffer Overflow Advisory ID: CORE-2015-0007 Advisory URL: http://www.coresecurity.com/advisories/schneider-vampset-stack-and-heap-buffer-overflow Date published: 2015-03-30 Date of last update: 2015-03-27 Vendors contacted: Schneider...
[SECURITY] [DSA 3217-1] dpkg security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3217-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 09, 2015 http://www.debian.org/security/faq -...
LibTIFF multiple security vulnerabilities
Multiple memory corruptions on different formats parsing...
Schneider Vampset buffer overflow
Heap and stack buffer overflows...
CA Spectrum security vulnerabilities
XSS, code execution...
[USN-2565-1] Linux kernel vulnerabilities
========================================================================== Ubuntu Security Notice USN-2565-1 April 09, 2015 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Linux kernel security vulnerabilities
Information leakage...
APPLE-SA-2015-04-08-5 Xcode 6.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2015-04-08-5 Xcode 6.3 Xcode 6.3 is now available and addresses the following: Clang Available for: OS X Mavericks v10.9.4 or later Impact: An attacker may be able to bypass stack guards Description: A register allocation issue existed in...
EMC PowerPath backdoor account
EMC PowerPath vApp undocumented account...
AST-2015-003: TLS Certificate Common name NULL byte exploit
Asterisk Project Security Advisory - AST-2015-003 Product Asterisk Summary TLS Certificate Common name NULL byte exploit Nature of Advisory Man in the Middle Attack Susceptibility Remote Authenticated Sessions Severity Major Exploits Known None Reported On 12 January, 2015 Reported By Maciej...