47153 matches found
Wordpress bulletproof-security <=.51 multiple vulnerabilities
Vulnerability title: Wordpress bulletproof-security =.51 multiple vulnerabilities Author: Pietro Oliva CVE: CVE-2014-7958, CVE-2014-7959, CVE-2014-8749 Vendor: AITpro Product: bulletproof-security Affected version: bulletproof-security = .51 Vulnerabilities fixed in version: .51.1 Details: xss...
Exploit for stealing backups on WP sites with WP-DB-Backup v2.2.4 plugin
!/bin/bash Larry W. Cashdollar, @larry0 Will brute force and search a Wordpress target site with WP-DB-Backup v2.2.4 plugin installed for any backups done on 20141031 assumes the wordpress database is wordpress and the table prefix is wp...
[ MDVSA-2014:216 ] php-ZendFramework
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:216 http://www.mandriva.com/en/support/security/ Package : php-ZendFramework Date : November 20, 2014 Affected: Business Server 1.0 Problem Description: A vulnerability has been found and corrected in...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
mutt DoS
Crash on password parsing...
flac memory corruptions
Buffer overflows on audio files parsing...
[ MDVSA-2014:232 ] glibc
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:232 http://www.mandriva.com/en/support/security/ Package : glibc Date : November 27, 2014 Affected: Business Server 1.0 Problem Description: Updated glibc package fixes security vulnerability: The function...
[USN-2422-1] Squid vulnerabilities
========================================================================== Ubuntu Security Notice USN-2422-1 November 25, 2014 squid3 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
libksba buffer overflow
Buffer overflow on S/MIME messages parsing...
imagemagic DoS
Out-of-buffer reads...
GNU glibc code execution
wordexp function code execution...
[USN-2423-1] ClamAV vulnerabilities
========================================================================== Ubuntu Security Notice USN-2423-1 November 26, 2014 clamav vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
icecast information disclosure
Server leaks scripts sources...
[ MDVSA-2014:230 ] kernel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:230 http://www.mandriva.com/en/support/security/ Package : kernel Date : November 27, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been found and corrected in the Linu...
Linux kernel multiple security vulnerabilities
Multiple KVM vulnerabilities, CIFS client DoS, remote DoS vulnerabilities, tracesyscalls privilege escalation and protection bypass...
[oCERT 2014-008] libFLAC multiple issues
Description: FLAC is an open source lossless audio codec supported by several software and music players. The libFLAC project, an open source library implementing reference encoders and decoders for native FLAC and Ogg FLAC audio content, suffers from multiple implementation issues. In particular...
[USN-2426-1] FLAC vulnerabilities
========================================================================== Ubuntu Security Notice USN-2426-1 November 27, 2014 flac vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
ClamAV memory corruptions
Memory corruptions on JS and PE files parsing...
squid security vulnerabilities
DoS and information disclosure in pinger service...
[ MDVSA-2014:234 ] libksba
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:234 http://www.mandriva.com/en/support/security/ Package : libksba Date : November 28, 2014 Affected: Business Server 1.0 Problem Description: Updated libksba packages fix security vulnerability: By using...
[ MDVSA-2014:231 ] icecast
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:231 http://www.mandriva.com/en/support/security/ Package : icecast Date : November 27, 2014 Affected: Business Server 1.0 Problem Description: Updated icecast package fixes security vulnerability: Icecast di...
[ MDVSA-2014:226 ] imagemagick
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:226 http://www.mandriva.com/en/support/security/ Package : imagemagick Date : November 25, 2014 Affected: Business Server 1.0 Problem Description: Updated imagemagick packages fix security vulnerabilities:...
dbus multiple security vulnerabilities
Memory corruptions, DoS...
[USN-2425-1] DBus vulnerability
========================================================================== Ubuntu Security Notice USN-2425-1 November 27, 2014 dbus vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
libvirt information leakage
Information access via qemuDomainFormatXML...
AST-2014-018: AMI permission escalation through DB dialplan function
Asterisk Project Security Advisory - AST-2014-018 Product Asterisk Summary AMI permission escalation through DB dialplan function Nature of Advisory Permission Escalation Susceptibility Remote Authenticated Sessions Severity Minor Exploits Known No Reported On November 17, 2014 Reported By Gareth...
AST-2014-017: Permission escalation through ConfBridge actions/dialplan functions
Asterisk Project Security Advisory - AST-2014-017 Product Asterisk Summary Permission escalation through ConfBridge actions/dialplan functions Nature of Advisory Permission Escalation Susceptibility Remote Authenticated Sessions Severity Minor Exploits Known No Reported On November 4, 2014 Report...
AST-2014-014: High call load may result in hung channels in ConfBridge.
Asterisk Project Security Advisory - AST-2014-014 Product Asterisk Summary High call load may result in hung channels in ConfBridge. Nature of Advisory Denial of Service Susceptibility Remote Unauthenticated Sessions Severity Moderate Exploits Known No Reported On 19 October, 2014 Reported By Ben...
AST-2014-016: Remote Crash Vulnerability in PJSIP channel driver
Asterisk Project Security Advisory - AST-2014-015 Product Asterisk Summary Remote Crash Vulnerability in PJSIP channel driver Nature of Advisory Denial of Service Susceptibility Remote Unauthenticated Sessions Severity Moderate Exploits Known No Reported On 30 October 2014 Reported By Yaron Nahum...
mountall privilege escalation
umask is handled incorrectly...
[USN-2404-1] libvirt vulnerabilities
========================================================================== Ubuntu Security Notice USN-2404-1 November 11, 2014 libvirt vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...
CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload
CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload 1. Background tcpdump is a powerful command-line packet analyzer. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is attache...
Ruby DoS
Resources exhaustion on XML parsing. Memory corruption in encodes...
[USN-2412-1] Ruby vulnerability
========================================================================== Ubuntu Security Notice USN-2412-1 November 20, 2014 ruby1.8, ruby1.9.1, ruby2.0, ruby2.1 vulnerability ========================================================================== A security issue affects these releases of...
[ MDVSA-2014:224 ] krb5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:224 http://www.mandriva.com/en/support/security/ Package : krb5 Date : November 21, 2014 Affected: Business Server 1.0 Problem Description: Updated krb5 packages fix security vulnerability: The...
Apple TV multiple security vulnerabilities
Memory corruptions, unsigned code execution, privilege escalation...
APPLE-SA-2014-11-17-3 Apple TV 7.0.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-3 Apple TV 7.0.2 Apple TV 7.0.2 is now available and addresses the following: Apple TV Available for: Apple TV 3rd generation and later Impact: An attacker with a privileged network position may cause an unexpected application...
[USN-2413-1] AppArmor vulnerability
========================================================================== Ubuntu Security Notice USN-2413-1 November 20, 2014 apparmor vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
GnuTLS memory corruption
Memory corruption on ECC...
CVE-2014-8768 tcpdump denial of service in verbose mode using malformed Geonet payload
CVE-2014-8768 tcpdump denial of service in verbose mode using malformed Geonet payload 1. Background tcpdump is a powerful command-line packet analyzer. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is...
Apple Mac OS X multiple security vulnerabilities
Information leakage, memory corruption...
APPLE-SA-2014-11-17-1 iOS 8.1.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-1 iOS 8.1.1 iOS 8.1.1 is now available and addresses the following: CFNetwork Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Website cache may not be fully cleared after leaving...
APPLE-SA-2014-11-17-2 OS X Yosemite 10.10.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-2 OS X Yosemite 10.10.1 OS X 10.10.1 is now available and addresses the following: CFNetwork Available for: OS X Yosemite v10.10 Impact: Website cache may not be fully cleared after leaving private browsing Description: A privacy...
AppArmor restrictions bypass
Restrictions bypass in apparmorparser...
wireshark multiple security vulnerabilities
Buffer overflow and DoS-conditions on different protocols parsing...
AST-2014-013: PJSIP ACLs are not loaded on startup
Asterisk Project Security Advisory - AST-2014-013 Product Asterisk Summary PJSIP ACLs are not loaded on startup Nature of Advisory Unauthorized Access Susceptibility Remote unauthenticated sessions Severity Moderate Exploits Known No Reported On 28 October, 2014 Reported By Jonathan Rose Posted O...
AST-2014-015: Remote Crash Vulnerability in PJSIP channel driver
Asterisk Project Security Advisory - AST-2014-015 Product Asterisk Summary Remote Crash Vulnerability in PJSIP channel driver Nature of Advisory Denial of Service Susceptibility Remote Unauthenticated Sessions Severity Moderate Exploits Known No Reported On 30 October 2014 Reported By Yaron Nahum...
Asterisk multiple security vulnerabilities
Restrictions bypass, privilege escalation, DoS...
[ MDVSA-2014:223 ] wireshark
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:223 http://www.mandriva.com/en/support/security/ Package : wireshark Date : November 21, 2014 Affected: Business Server 1.0 Problem Description: Updated wireshark packages fix security vulnerabilities: SigCo...
[USN-2400-1] LibreOffice vulnerability
========================================================================== Ubuntu Security Notice USN-2400-1 November 10, 2014 libreoffice vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...