47153 matches found
ASUS RT-G32 security vulnerabilities
XSS, CSRF...
KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation Title: XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation Advisory ID: KL-001-2015-004 Publication Date: 2015.09.01 Publication URL:...
KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege Escalation Title: SiS Windows VGA Display Manager Multiple Privilege Escalation Advisory ID: KL-001-2015-003 Publication Date: 2015.09.01 Publication URL:...
Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability
Document Title: =============== Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1597 Release Date: ============= 2015-09-21 Vulnerability Laboratory ID VL-ID:...
owncloud multiple security vulnerabilities
Code execution, authentication bypass, information disclosure, crossite scripting, DoS...
SAP Netwaver - XML External Entity Injection
Title: SAP Netwaver - XML External Entity Injection Author: Lukasz Miedzinski GPG: Public key provided in attachment Date: 29/10/2014 CVE: CVE-2015-7241 Affected software : =================== SAP Netwear : 7.01 Vendor advisories only for customers: =================== External ID : 851975 2014...
APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002
APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002 Mac EFI Security Update 2015-002 is now available and addresses the following: EFI Available for: OS X Mavericks v10.9.5 Impact: An attacker can exercise unused EFI functions Description: An issue existed with EFI argument handling. This was...
APPLE-SA-2015-10-21-7 Xcode 7.1
APPLE-SA-2015-10-21-7 Xcode 7.1 Xcode 7.1 is now available and addresses the following: Swift Available for: OS X Yosemite v10.10.5 or later Impact: Swift programs performing certain type conversions may receive unexpected values Description: A type conversion issue existed that could lead to...
D-Link DCS-2103 security vulnerabilities
Directory traversal, information leakage, XSS, CSRF...
owncloud client server spoofing
Server certificate spoofing is possible...
Multiple Vulnerabilities found in ZHONE
Vantage Point Security Advisory 2015-002 ======================================== Title: Multiple Vulnerabilities found in ZHONE Vendor: Zhone Vendor URL: http://www.zhone.com Device Model: ZHONE ZNID GPON 2426A 24xx, 24xxA, 42xx, 42xxA, 26xx, and 28xx series models Versions affected: S3.0.501...
Vulnerabilities in Callisto 821+R3 ADSL Router
Hello 3APA3A! In 2011 I wrote 22 advisories about vulnerabilities in Callisto 821+ ADSL Router http://seclists.org/fulldisclosure/2011/Aug/1. Because vendor ignored in 2011 all my letters and subsequent my public disclosure of vulnerabilities and new devices are vulnerable as well, so in August I...
XSS and CSRF vulnerabilities in ASUS RT-G32
Hello 3APA3A! There are Cross-Site Scripting and Cross-Site Request Forgery vulnerabilities in ASUS Wireless Router RT-G32. ------------------------- Affected products: ------------------------- Vulnerable is the next model: ASUS RT-G32 with different versions of firmware. I checked in ASUS RT-G3...
Multiple Remote Code Execution found in ZHONE
Vantage Point Security Advisory 2015-003 ======================================== Title: Multiple Remote Code Execution found in ZHONE Vendor: Zhone Vendor URL: http://www.zhone.com Device Model: ZHONE ZNID GPON 2426A 24xx, 24xxA, 42xx, 42xxA, 26xx, and 28xx series models Versions affected:...
[USN-2780-2] MiniUPnP vulnerability
========================================================================== Ubuntu Security Notice USN-2780-2 October 23, 2015 miniupnpc vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
ZTE Callisto 821+ ADSL router security vulnerabilities
Crossite scripting, crossite request forgery...
Apple watchOS security vulnerabilities
Information disclosure, memory corruptions, multiple vulnerabilities in different libraries...
[SECURITY] [DSA 3373-1] owncloud security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq...
MiniUPnP library buffer overflow
Buffer overflow on network request processing...
Zhone ADSL2+ 4P Bridge & Router (Broadcom) - Multiple Vulnerabilities
Document Title: =============== Zhone ADSL2+ 4P Bridge & Router Broadcom - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1591 Download: http://www.zhone.com/support/downloads/cpe/6218-I2/6218-I2R030220AnnexA.zip Release Date:...
Apple iOS multiple security vulnerabilities
Screen unlock, information disclosure, restrictions bypass, multiple memory corruptions, weak encryption, multiple vulnerabilities in different libraries...
Photos in Wifi v1.0.1 iOS - Arbitrary File Upload Vulnerability
Document Title: =============== Photos in Wifi v1.0.1 iOS - Arbitrary File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1600 Release Date: ============= 2015-09-28 Vulnerability Laboratory ID VL-ID:...
[USN-2722-1] GDK-PixBuf vulnerability
========================================================================== Ubuntu Security Notice USN-2722-1 August 26, 2015 gdk-pixbuf vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
GDK-PixBuf security vulnerabilities
Buffer overflow, integer overflow, on graphic formats processing...
ERPSCAN Research Advisory [ERPSCAN-15-017] SAP NetWeaver J2EE DAS service - Unauthorized Access
ERPSCAN Research Advisory ERPSCAN-15-017 SAP NetWeaver J2EE DAS service - Unauthorized Access Application: SAP NetWeaver Versions Affected: SAP NetWeaver AS JAVA, probably others Vendor URL: http://SAP.com Bugs: Unauthorized access Sent: 20.04.2013 Reported: 21.04.2013 Vendor response: 21.04.2013...
[CVE-2015-2552] Windows 8+ - Trusted Boot Security Feature Bypass Vulnerability
Vulnerability title Microsoft: Trusted Boot Security Feature Bypass Vulnerability CVE: CVE-2015-2552 Vendor: Microsoft Product: Windows NT series 8.0+ Affected versions: See "systems affected". Reported by: "Myria" Vulnerability Summary: ===================== An attacker with administrative acces...
Vulnerabilities in Callisto 821+R3 ADSL Router
Hello 3APA3A! After all my advisories about vulnerabilities in Callisto 821+ http://seclists.org/fulldisclosure/2011/Aug/1 and recent advisory about Callisto 821+R3, here is new one. Because vendor ignored in 2011 all my letters and subsequent my public disclosure of vulnerabilities and new devic...
[USN-2769-1] Apache Commons HttpClient
========================================================================== Ubuntu Security Notice USN-2769-1 October 14, 2015 commons-httpclient vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...
Different iOS / Android applications vulnerabilities
Information leaks, code execution, protection bypass, etc...
Apple Mac OS X / Mac EFI / OS X Server multiple security vulnerabilities
Code execution, information disclosure, restrictions bypass, multiple memory corruptions, multiple libraries vulnerabilities...
[CORE-2015-0013] - FortiClient Antivirus Multiple Vulnerabilities
Advisory Information Title: FortiClient Antivirus Multiple Vulnerabilities Advisory ID: CORE-2015-0013 Advisory URL: http://www.coresecurity.com/advisories/forticlient-antivirus-multiple-vulnerabilities Date published: 2015-09-01 Date of last update: 2015-09-01 Vendors contacted: Fortinet...
Apple Safari / Webkit multiple security vulnerabilities
Information spoofing, information disclosure, restriction bypass, race conditions, memory corruptions...
[SECURITY] [DSA 3363-1] owncloud-client security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3363-1 [email protected] https://www.debian.org/security/ Luciano Bello September 20, 2015 https://www.debian.org/security/faq...
Microsoft Office multiple security vulnerabilities
Multiple memory corruptions...
Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334)
Qualys Security Advisory LibreSSL CVE-2015-5333 and CVE-2015-5334 ======================================================================== Contents ======================================================================== Summary Memory Leak CVE-2015-5333 Buffer Overflow CVE-2015-5334...
LibreSSL security vulnerabilities
DoS, buffer overflow...
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
Memory corruptions, information disclosure, DoS, buffer overflow, restrictions bypass...
[USN-2772-1] PostgreSQL vulnerabilities
========================================================================== Ubuntu Security Notice USN-2772-1 October 16, 2015 postgresql-9.1, postgresql-9.3, postgresql-9.4 vulnerabilities ========================================================================== A security issue affects these...
Ubuntu Click restrictions bypass
It's possible to trick user into giving escalated privileges...
[USN-2771-1] Click vulnerability
========================================================================== Ubuntu Security Notice USN-2771-1 October 15, 2015 click vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
PostgreSQL security vulnerabilities
Information disclosure, DoS...
Cisco Prime multiple security vulnerabilities
Restrictions bypass, privilege escalation, information disclosure...
[USN-2744-1] Apport vulnerability
========================================================================== Ubuntu Security Notice USN-2744-1 September 24, 2015 apport vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Cisco AnyConnect elevation of privileges via DLL side loading
------------------------------------------------------------------------ Cisco AnyConnect elevation of privileges via DLL side loading ------------------------------------------------------------------------ Yorick Koster, June 2015...
Cisco AnyConnect elevation of privileges via DMG install script
------------------------------------------------------------------------ Cisco AnyConnect elevation of privileges via DMG install script ------------------------------------------------------------------------ Yorick Koster, July 2015...
EMC RSA Archer GRC multiple seucurity vulnerabilities
Restrictions bypass, crossite scripting, information disclosure...
Unity Settings Daemon privilege escalation
User's session access...
Microsoft Exchange information disclosure
Information disclosure and spoofing, crossite scripting...
[USN-2747-1] NVIDIA graphics drivers vulnerability
========================================================================== Ubuntu Security Notice USN-2747-1 September 28, 2015 nvidia-graphics-drivers-304, nvidia-graphics-drivers-304-updates, nvidia-graphics-drivers-340, nvidia-graphics-drivers-340-updates, nvidia-graphics-drivers-346,...
[security bulletin] HPSBST03502 rev.1 - HP 3PAR Service Processor (SP) SPOCC, Remote Disclosure of Information
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04822249 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04822249 Version: 1 HPSBST03502 rev.1 - HP 3PAR Service Processor SP SPOCC, Remot...