47153 matches found
Docker 1.3.2 - Security Advisory [24 Nov 2014]
Today, we are releasing Docker 1.3.2 in order to address two critical security issues. This release also includes several bugfixes, including changes to the insecure-registry option. Below are CVE descriptions for the vulnerabilities addressed in this release. Docker 1.3.2 is available immediatel...
Slider Revolution/Showbiz Pro shell upload exploit
!/usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 15 October 2014 Coded: 15 October 2014 Updated: 25 November 2014 Published: 25 November 2014 MorXploit Research http://www.MorXploit.com Vendor: ThemePunch...
Missing SSL certificate validation in MercadoLibre app for Android [STIC-2014-0211]
Fundacion Dr. Manuel Sadosky - Programa STIC Advisory www.fundacionsadosky.org.ar Missing SSL certificate validation in MercadoLibre app for Android 1. Advisory Information Title: Missing SSL cert validation in MercadoLibre app for Android Advisory ID: STIC-2014-0211 Advisory URL:...
[security bulletin] HPSBMU03190 rev.1 - HP Helion Cloud Development Platform Community and Commercial Editions, Remote Unauthenticated Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04500238 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04500238 Version: 1 HPSBMU03190 rev....
CVE-2014-8732
CVE-2014-8732 CVSSv2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:H/RL:U/RC:C CVSSv2 Base Score=7.5 CVSSv2 Temp Score=7.5 OWASP Top 10 classification: A3 - Cross Site Scripting There is a stored xss vulnerability in phpMemcachedAdmin. Most of the user-specified input fields which are displayed on several...
[ MDVSA-2014:234 ] libksba
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:234 http://www.mandriva.com/en/support/security/ Package : libksba Date : November 28, 2014 Affected: Business Server 1.0 Problem Description: Updated libksba packages fix security vulnerability: By using...
[USN-2426-1] FLAC vulnerabilities
========================================================================== Ubuntu Security Notice USN-2426-1 November 27, 2014 flac vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
libksba buffer overflow
Buffer overflow on S/MIME messages parsing...
[USN-2422-1] Squid vulnerabilities
========================================================================== Ubuntu Security Notice USN-2422-1 November 25, 2014 squid3 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
[ MDVSA-2014:231 ] icecast
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:231 http://www.mandriva.com/en/support/security/ Package : icecast Date : November 27, 2014 Affected: Business Server 1.0 Problem Description: Updated icecast package fixes security vulnerability: Icecast di...
squid security vulnerabilities
DoS and information disclosure in pinger service...
[USN-2425-1] DBus vulnerability
========================================================================== Ubuntu Security Notice USN-2425-1 November 27, 2014 dbus vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
[ MDVSA-2014:226 ] imagemagick
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:226 http://www.mandriva.com/en/support/security/ Package : imagemagick Date : November 25, 2014 Affected: Business Server 1.0 Problem Description: Updated imagemagick packages fix security vulnerabilities:...
imagemagic DoS
Out-of-buffer reads...
[oCERT 2014-008] libFLAC multiple issues
Description: FLAC is an open source lossless audio codec supported by several software and music players. The libFLAC project, an open source library implementing reference encoders and decoders for native FLAC and Ogg FLAC audio content, suffers from multiple implementation issues. In particular...
flac memory corruptions
Buffer overflows on audio files parsing...
[USN-2423-1] ClamAV vulnerabilities
========================================================================== Ubuntu Security Notice USN-2423-1 November 26, 2014 clamav vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
[ MDVSA-2014:230 ] kernel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:230 http://www.mandriva.com/en/support/security/ Package : kernel Date : November 27, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been found and corrected in the Linu...
ClamAV memory corruptions
Memory corruptions on JS and PE files parsing...
[ MDVSA-2014:232 ] glibc
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:232 http://www.mandriva.com/en/support/security/ Package : glibc Date : November 27, 2014 Affected: Business Server 1.0 Problem Description: Updated glibc package fixes security vulnerability: The function...
GNU glibc code execution
wordexp function code execution...
Linux kernel multiple security vulnerabilities
Multiple KVM vulnerabilities, CIFS client DoS, remote DoS vulnerabilities, tracesyscalls privilege escalation and protection bypass...
dbus multiple security vulnerabilities
Memory corruptions, DoS...
icecast information disclosure
Server leaks scripts sources...
GnuTLS memory corruption
Memory corruption on ECC...
CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload
CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload 1. Background tcpdump is a powerful command-line packet analyzer. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is attache...
CVE-2014-8769 tcpdump unreliable output using malformed AOVD payload
CVE-2014-8769 tcpdump unreliable output using malformed AOVD payload 1. Background tcpdump is a powerful command-line packet analyzer. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is attached. 2. Summary...
wireshark multiple security vulnerabilities
Buffer overflow and DoS-conditions on different protocols parsing...
libvirt information leakage
Information access via qemuDomainFormatXML...
[ MDVSA-2014:213 ] curl
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:213 http://www.mandriva.com/en/support/security/ Package : curl Date : November 18, 2014 Affected: Business Server 1.0 Problem Description: Updated curl packages fix security vulnerability: Symeon Paraschoud...
AppArmor restrictions bypass
Restrictions bypass in apparmorparser...
Apple Mac OS X multiple security vulnerabilities
Information leakage, memory corruption...
[USN-2400-1] LibreOffice vulnerability
========================================================================== Ubuntu Security Notice USN-2400-1 November 10, 2014 libreoffice vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...
AST-2014-013: PJSIP ACLs are not loaded on startup
Asterisk Project Security Advisory - AST-2014-013 Product Asterisk Summary PJSIP ACLs are not loaded on startup Nature of Advisory Unauthorized Access Susceptibility Remote unauthenticated sessions Severity Moderate Exploits Known No Reported On 28 October, 2014 Reported By Jonathan Rose Posted O...
AST-2014-014: High call load may result in hung channels in ConfBridge.
Asterisk Project Security Advisory - AST-2014-014 Product Asterisk Summary High call load may result in hung channels in ConfBridge. Nature of Advisory Denial of Service Susceptibility Remote Unauthenticated Sessions Severity Moderate Exploits Known No Reported On 19 October, 2014 Reported By Ben...
[ MDVSA-2014:224 ] krb5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:224 http://www.mandriva.com/en/support/security/ Package : krb5 Date : November 21, 2014 Affected: Business Server 1.0 Problem Description: Updated krb5 packages fix security vulnerability: The...
CVE-2014-8768 tcpdump denial of service in verbose mode using malformed Geonet payload
CVE-2014-8768 tcpdump denial of service in verbose mode using malformed Geonet payload 1. Background tcpdump is a powerful command-line packet analyzer. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is...
mountall privilege escalation
umask is handled incorrectly...
LibreOffice use-after-free vulnereability
Ingress remote control protocol use-after-free, memory corruption in OLE preview...
Asterisk multiple security vulnerabilities
Restrictions bypass, privilege escalation, DoS...
AST-2014-017: Permission escalation through ConfBridge actions/dialplan functions
Asterisk Project Security Advisory - AST-2014-017 Product Asterisk Summary Permission escalation through ConfBridge actions/dialplan functions Nature of Advisory Permission Escalation Susceptibility Remote Authenticated Sessions Severity Minor Exploits Known No Reported On November 4, 2014 Report...
[ MDVSA-2014:215 ] gnutls
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:215 http://www.mandriva.com/en/support/security/ Package : gnutls Date : November 19, 2014 Affected: Business Server 1.0 Problem Description: Updated gnutls package fix security vulnerability: An out-of-boun...
libcurl information leakage
Memory content leakage via POST...
MIT krb5 privilege escalation
Under some conditions, kadm5randkeyprincipal3 returns old keys...
Ruby DoS
Resources exhaustion on XML parsing. Memory corruption in encodes...
[USN-2412-1] Ruby vulnerability
========================================================================== Ubuntu Security Notice USN-2412-1 November 20, 2014 ruby1.8, ruby1.9.1, ruby2.0, ruby2.1 vulnerability ========================================================================== A security issue affects these releases of...
APPLE-SA-2014-11-17-1 iOS 8.1.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-1 iOS 8.1.1 iOS 8.1.1 is now available and addresses the following: CFNetwork Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Website cache may not be fully cleared after leaving...
[USN-2404-1] libvirt vulnerabilities
========================================================================== Ubuntu Security Notice USN-2404-1 November 11, 2014 libvirt vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...
[USN-2411-1] mountall vulnerability
========================================================================== Ubuntu Security Notice USN-2411-1 November 18, 2014 mountall vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...