47153 matches found
SAP NetWeaver security vulnerabilities
Unauthorized access, XXE...
Zhone routers multiple security vulnerabilities
Authentication bypass, information disclosure, code execution...
Fortinet FortiClient multiple security vulnerabilities
Multiple privilege escalations...
[SECURITY] [DSA 3376-1] chromium-browser security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3376-1 [email protected] https://www.debian.org/security/ Michael Gilbert October 20, 2015 https://www.debian.org/security/faq -...
Re: CVE-2015-5204: HTTP header injection vulnerability in Apache Cordova File Transfer Plugin for Android
CVE-2015-5204: HTTP header injection vulnerability in Apache Cordova File Transfer Plugin for Android Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Cordova Android File Transfer Plugin 1.2.1 and below Description: Android applications built with the Cordova framework...
XSS and CSRF vulnerabilities in ASUS RT-G32
Hello 3APA3A! There are Cross-Site Scripting and Cross-Site Request Forgery vulnerabilities in ASUS Wireless Router RT-G32. ------------------------- Affected products: ------------------------- Vulnerable is the next model: ASUS RT-G32 with different versions of firmware. I checked in ASUS RT-G3...
APPLE-SA-2015-10-21-2 watchOS 2.0.1
APPLE-SA-2015-10-21-2 watchOS 2.0.1 watchOS 2.0.1 is now available and addresses the following: Apple Pay Available for: Apple Watch Sport, Apple Watch, Apple Watch Edition, and Apple Watch Hermes Impact: Some cards may allow a terminal to retrieve limited recent transaction information when maki...
SAP Netwaver - XML External Entity Injection
Title: SAP Netwaver - XML External Entity Injection Author: Lukasz Miedzinski GPG: Public key provided in attachment Date: 29/10/2014 CVE: CVE-2015-7241 Affected software : =================== SAP Netwear : 7.01 Vendor advisories only for customers: =================== External ID : 851975 2014...
Apache Commons HttpClient DoS
No timeout on handshake...
KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation Title: XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation Advisory ID: KL-001-2015-004 Publication Date: 2015.09.01 Publication URL:...
APPLE-SA-2015-10-21-5 iTunes 12.3.1
APPLE-SA-2015-10-21-5 iTunes 12.3.1 iTunes 12.3.1 is now available and addresses the following: iTunes Available for: Windows 7 and later Impact: A man-in-the-middle attack while browsing the iTunes Store via iTunes may result in unexpected application termination or arbitrary code execution...
Cisco ASA multiple security vulnerabilities
Multiple DoS conditions...
APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002
APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002 Mac EFI Security Update 2015-002 is now available and addresses the following: EFI Available for: OS X Mavericks v10.9.5 Impact: An attacker can exercise unused EFI functions Description: An issue existed with EFI argument handling. This was...
MiniUPnP library buffer overflow
Buffer overflow on network request processing...
Apple Safari / Webkit multiple security vulnerabilities
Information spoofing, information disclosure, restriction bypass, race conditions, memory corruptions...
Different iOS / Android applications vulnerabilities
Information leaks, code execution, protection bypass, etc...
Multiple Remote Code Execution found in ZHONE
Vantage Point Security Advisory 2015-003 ======================================== Title: Multiple Remote Code Execution found in ZHONE Vendor: Zhone Vendor URL: http://www.zhone.com Device Model: ZHONE ZNID GPON 2426A 24xx, 24xxA, 42xx, 42xxA, 26xx, and 28xx series models Versions affected:...
[USN-2780-2] MiniUPnP vulnerability
========================================================================== Ubuntu Security Notice USN-2780-2 October 23, 2015 miniupnpc vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
[SECURITY] [DSA 3373-1] owncloud security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq...
Zhone ADSL2+ 4P Bridge & Router (Broadcom) - Multiple Vulnerabilities
Document Title: =============== Zhone ADSL2+ 4P Bridge & Router Broadcom - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1591 Download: http://www.zhone.com/support/downloads/cpe/6218-I2/6218-I2R030220AnnexA.zip Release Date:...
Microsoft Office multiple security vulnerabilities
Multiple memory corruptions...
Vulnerabilities in Callisto 821+R3 ADSL Router
Hello 3APA3A! After all my advisories about vulnerabilities in Callisto 821+ http://seclists.org/fulldisclosure/2011/Aug/1 and recent advisory about Callisto 821+R3, here is new one. Because vendor ignored in 2011 all my letters and subsequent my public disclosure of vulnerabilities and new devic...
[CVE-2015-2552] Windows 8+ - Trusted Boot Security Feature Bypass Vulnerability
Vulnerability title Microsoft: Trusted Boot Security Feature Bypass Vulnerability CVE: CVE-2015-2552 Vendor: Microsoft Product: Windows NT series 8.0+ Affected versions: See "systems affected". Reported by: "Myria" Vulnerability Summary: ===================== An attacker with administrative acces...
Apple Mac OS X / Mac EFI / OS X Server multiple security vulnerabilities
Code execution, information disclosure, restrictions bypass, multiple memory corruptions, multiple libraries vulnerabilities...
[USN-2769-1] Apache Commons HttpClient
========================================================================== Ubuntu Security Notice USN-2769-1 October 14, 2015 commons-httpclient vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...
Apple watchOS security vulnerabilities
Information disclosure, memory corruptions, multiple vulnerabilities in different libraries...
Apple iOS multiple security vulnerabilities
Screen unlock, information disclosure, restrictions bypass, multiple memory corruptions, weak encryption, multiple vulnerabilities in different libraries...
ZTE Callisto 821+ ADSL router security vulnerabilities
Crossite scripting, crossite request forgery...
[CORE-2015-0013] - FortiClient Antivirus Multiple Vulnerabilities
Advisory Information Title: FortiClient Antivirus Multiple Vulnerabilities Advisory ID: CORE-2015-0013 Advisory URL: http://www.coresecurity.com/advisories/forticlient-antivirus-multiple-vulnerabilities Date published: 2015-09-01 Date of last update: 2015-09-01 Vendors contacted: Fortinet...
Photos in Wifi v1.0.1 iOS - Arbitrary File Upload Vulnerability
Document Title: =============== Photos in Wifi v1.0.1 iOS - Arbitrary File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1600 Release Date: ============= 2015-09-28 Vulnerability Laboratory ID VL-ID:...
[SECURITY] [DSA 3363-1] owncloud-client security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3363-1 [email protected] https://www.debian.org/security/ Luciano Bello September 20, 2015 https://www.debian.org/security/faq...
[USN-2722-1] GDK-PixBuf vulnerability
========================================================================== Ubuntu Security Notice USN-2722-1 August 26, 2015 gdk-pixbuf vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
GDK-PixBuf security vulnerabilities
Buffer overflow, integer overflow, on graphic formats processing...
ERPSCAN Research Advisory [ERPSCAN-15-017] SAP NetWeaver J2EE DAS service - Unauthorized Access
ERPSCAN Research Advisory ERPSCAN-15-017 SAP NetWeaver J2EE DAS service - Unauthorized Access Application: SAP NetWeaver Versions Affected: SAP NetWeaver AS JAVA, probably others Vendor URL: http://SAP.com Bugs: Unauthorized access Sent: 20.04.2013 Reported: 21.04.2013 Vendor response: 21.04.2013...
Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334)
Qualys Security Advisory LibreSSL CVE-2015-5333 and CVE-2015-5334 ======================================================================== Contents ======================================================================== Summary Memory Leak CVE-2015-5333 Buffer Overflow CVE-2015-5334...
LibreSSL security vulnerabilities
DoS, buffer overflow...
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
Memory corruptions, information disclosure, DoS, buffer overflow, restrictions bypass...
[USN-2772-1] PostgreSQL vulnerabilities
========================================================================== Ubuntu Security Notice USN-2772-1 October 16, 2015 postgresql-9.1, postgresql-9.3, postgresql-9.4 vulnerabilities ========================================================================== A security issue affects these...
Ubuntu Click restrictions bypass
It's possible to trick user into giving escalated privileges...
[USN-2771-1] Click vulnerability
========================================================================== Ubuntu Security Notice USN-2771-1 October 15, 2015 click vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
PostgreSQL security vulnerabilities
Information disclosure, DoS...
Cisco AnyConnect elevation of privileges via DMG install script
------------------------------------------------------------------------ Cisco AnyConnect elevation of privileges via DMG install script ------------------------------------------------------------------------ Yorick Koster, July 2015...
NVidia graphics drivers privilege escalation
Privilege escalation via IOCTL processing...
Unity Settings Daemon privilege escalation
User's session access...
[USN-2747-1] NVIDIA graphics drivers vulnerability
========================================================================== Ubuntu Security Notice USN-2747-1 September 28, 2015 nvidia-graphics-drivers-304, nvidia-graphics-drivers-304-updates, nvidia-graphics-drivers-340, nvidia-graphics-drivers-340-updates, nvidia-graphics-drivers-346,...
Cisco AnyConnect elevation of privileges via DLL side loading
------------------------------------------------------------------------ Cisco AnyConnect elevation of privileges via DLL side loading ------------------------------------------------------------------------ Yorick Koster, June 2015...
[USN-2744-1] Apport vulnerability
========================================================================== Ubuntu Security Notice USN-2744-1 September 24, 2015 apport vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
EMC RSA Archer GRC multiple seucurity vulnerabilities
Restrictions bypass, crossite scripting, information disclosure...