47153 matches found
[SECURITY] [DSA 3228-1] ppp security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3228-1 [email protected] http://www.debian.org/security/ Sebastien Delafond April 16, 2015 http://www.debian.org/security/faq -...
Hancom Office memory corruption
Memory corruption on document parsing...
[security bulletin] HPSBMU03264 rev.1 - HP Network Automation, Multiple Remote Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04574207 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04574207 Version: 1 HPSBMU03264 rev....
HP Network Automation multiple security vulnerabilities
XSS, CSRF, clickjacking...
APPLE-SA-2015-04-08-3 iOS 8.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-04-08-3 iOS 8.3 iOS 8.3 is now available and addresses the following: AppleKeyStore Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A malicious application may be able to guess the user's...
[CVE-2015-2810] Integer Overflow leading to heap corruption when assigning a long paragraph size value to a HanWord document
Product: Hancom Office Hwp 2014 Vendor: Hancom - www.hancom.com Versions Affected 32 bits only: HanWord Viewer 2007 Korean HanWord Viewer 2010 Â 8.5.6.1158 English HwpViewer 2014 VP- 9.1.0.2186 English Hwp 2014 VP - 9.0.0.1405 English/Korean Version Not vulnerable: Hwp 2014 VP - 9.1.0.2342...
gst-plugins buffer overflow
Buffer overflow on MP4 playback...
chrony multiple security vulnerabilities
Memory corruption, uninitialized pointer dereference, DoS...
[SECURITY] [DSA 3226-1] inspircd security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3226-1 [email protected] http://www.debian.org/security/ Sebastien Delafond April 15, 2015 http://www.debian.org/security/faq -...
ppp buffer overflow
Buffer overflow on RADIUS server response parsing...
Apport privilege escalation
Invalid crash report handling...
less uninitialized memory reference
No description provided...
[SECURITY] [DSA 3225-1] gst-plugins-bad0.10 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3225-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 15, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3222-1] chrony security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3222-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini April 12, 2015 http://www.debian.org/security/faq -...
[ MDVSA-2015:199 ] less
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:199 http://www.mandriva.com/en/support/security/ Package : less Date : April 10, 2015 Affected: Business Server 1.0, Business Server 2.0 Problem Description: Updated less package fixes security vulnerability...
[USN-2568-1] libx11, libxrender vulnerability
========================================================================== Ubuntu Security Notice USN-2568-1 April 13, 2015 libx11, libxrender vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...
inspircd security vulnerabilities
Buffer overflow, DoS...
Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities
Over 90 different vulnerabilities are fixed in quarterly update...
ESA-2015-069: EMC NetWorker Buffer Overflow Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-069: EMC NetWorker Buffer Overflow Vulnerability EMC Identifier: ESA-2015-069 CVE Identifier: CVE-2015-0530 Severity Rating: CVSS v2 Base Score: 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C Affected products: • All versions of NetWorker prior to the...
Apple iOS multiple security vulnerabilities
Restrictions bypass, privilege escalation, headers spoofing, XXE, memory corruptions, information disclosure, DoS, traffic hijacking...
[SYSS-2015-013] Panda Antivirus Pro 2015 - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-013 Product: Panda Antivirus Pro 2015 Vendor: Panda Security Affected Versions: 15.1.0 Tested Versions: 15.1.0 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level: Medium Solution...
Active Directory Federation Services information disclosure
Invalid session logoff...
[SYSS-2015-014] Panda Global Protection 2015 - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-014 Product: Panda Global Protection 2015 Vendor: Panda Security Affected Versions: 15.1.0 Tested Versions: 15.1.0 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level: Medium Solutio...
Secunia Research: Microsoft Windows GDI "MRSETDIBITSTODEVICE ::bPlay()" EMF Parsing Memory Corruption Vulnerability
====================================================================== Secunia Research 15/04/2015 Microsoft Windows GDI "MRSETDIBITSTODEVICE ::bPlay" EMF Parsing Memory Corruption Vulnerability ====================================================================== Table of Contents Affected...
[SYSS-2015-012] Panda Internet Security 2015 - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-012 Product: Panda Internet Security 2015 Vendor: Panda Security Affected Versions: 15.0.1 Tested Versions: 15.0.1 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level: Medium Solutio...
Cisco Secure Desktop code execution
Code execution in the signed jar library...
Cisco IOS multiple security vulnerabilities
Multiple DoS conditions, code execution...
Panda authentication bypass
Password is checked by client application...
Microsoft Windows multiple security vulnerabilities
Multiple Internet Explorer vulnerabilities, VBScript engine, graphics, HTTP.sys vulnerabilities, privilege escalation, code execution, restrictions bypass, information disclosure, DoS...
[SYSS-2015-015] Panda Gold Protection 2015 - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-015 Product: Panda Gold Protection 2015 Vendor: Panda Security Affected Versions: 15.1.0 Tested Versions: 15.1.0 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level: Medium Solution...
Microsoft Office and Sharepoint multiple security vulnerabilities
Code execution, privilege escalation...
Apache multiple security vulnerabilities
modheaders restrictions bypass, modcache DoS, modlua restrictions bypass and DoS, modproxyfcgi DoS, modgnutls restrictions bypass...
Microsoft Exchange crossite scripting
Multiple crossite scripting possibilities...
FreeRDP integer overflow
Integer overflow on server response parsing...
APPLE-SA-2015-04-08-5 Xcode 6.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2015-04-08-5 Xcode 6.3 Xcode 6.3 is now available and addresses the following: Clang Available for: OS X Mavericks v10.9.4 or later Impact: An attacker may be able to bypass stack guards Description: A register allocation issue existed in...
CA Spectrum security vulnerabilities
XSS, code execution...
[SECURITY] [DSA 3209-1] openldap security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3209-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 30, 2015 http://www.debian.org/security/faq -...
Erlang CRLF injection
CRLF injection in FTP commands...
[security bulletin] HPSBHF03310 rev.1 - HP Thin Clients running Windows Embedded Standard 7 (WES7) or Windows Embedded Standard 2009 (WES09) with HP Easy Deploy, Remote Elevation of Privilege, Execution of Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04629160 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04629160 Version: 1 HPSBHF03310 rev....
OpenLDAP multiple security vulnerabilities
DoS, privilege escalation...
ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability EMC Identifier: ESA-2015-056 CVE Identifier: CVE-2015-0529 Severity Rating: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N Affected products: • EMC PowerPath...
[USN-2565-1] Linux kernel vulnerabilities
========================================================================== Ubuntu Security Notice USN-2565-1 April 09, 2015 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Apple Mac OS X multiple security vulnerabilities
80 different vulnerabilities...
[ MDVSA-2015:147-1 ] libtiff
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:147-1 http://www.mandriva.com/en/support/security/ Package : libtiff Date : March 30, 2015 Affected: Business Server 1.0 Problem Description: Updated libtiff packages fix security vulnerabilities: The libtif...
Schneider Vampset buffer overflow
Heap and stack buffer overflows...
[ MDVSA-2015:170 ] gcc
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:170 http://www.mandriva.com/en/support/security/ Package : gcc Date : March 30, 2015 Affected: Business Server 2.0 Problem Description: Updated gcc packages fix the following security issue: Multiple integer...
dpkg protection bypass
dpkg-source package validation bypass...
[security bulletin] HPSBGN03307 rev.1 - HP Intelligent Provisioning, Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04626732 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04626732 Version: 1 HPSBGN03307 rev....
ctdb symbolic links vulnerabilities
Symbolic links vulnerabilities in temporary files creation...
HP Thin Clients security vulnerabilities
Code execution, privilege escalation...