47153 matches found
FreeBSD Security Advisory FreeBSD-SA-15:24.rpcbind
============================================================================= FreeBSD-SA-15:24.rpcbind Security Advisory The FreeBSD Project Topic: rpcbind8 remote denial of service Category: core Module: rpcbind Announced: 2015-09-29 Affects: All supported versions of FreeBSD. Corrected:...
[SYSS-2015-004] Kaspersky Small Office Security - Use of One-Way Hash withouth a Salt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-004 Product: Kaspersky Small Office Security KSOS Vendor: Kaspersky Lab ZAO Affected Versions: 13.0.4.233 Tested Versions: 13.0.4.233 Vulnerability Type: Use of a One-Way Hash without a Salt CWE-759 Risk Level: Low Solution...
[SYSS-2015-007] Kaspersky Internet Security - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-007 Product: Kaspersky Internet Security KIS Vendor: Kaspersky Lab ZAO Affected Versions: 15.0.2.361 Tested Versions: 15.0.2.361 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level:...
[SYSS-2015-002] Kaspersky Endpoint Security - Use of One-Way Hash withouth a Salt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-002 Product: Kaspersky Endpoint Security for Windows KES Vendor: Kaspersky Lab ZAO Affected Versions: 8.1.0.1042, 10.2.1.23 Tested Versions: 8.1.0.1042, 10.2.1.23 Vulnerability Type: Use of a One-Way Hash without a Salt CWE-75...
[SYSS-2015-006] Kaspersky Total Security - Use of One-Way Hash withouth a Salt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-006 Product: Kaspersky Total Security KTS Vendor: Kaspersky Lab ZAO Affected Versions: 15.0.1.415 Tested Versions: 15.0.1.415 Vulnerability Type: Use of a One-Way Hash without a Salt CWE-759 Risk Level: Low Solution Status:...
Kapersky applications security vulnerabilities
Weak authentication, weak hashing...
[SYSS-2015-005] Kaspersky Total Security - Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-005 Product: Kaspersky Total Security KTS Vendor: Kaspersky Lab ZAO Affected Versions: 15.0.1.415 Tested Versions: 15.0.1.415 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level:...
[SYSS-2015-008] Kaspersky Internet Security - Use of One-Way Hash withouth a Salt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-008 Product: Kaspersky Internet Security KIS Vendor: Kaspersky Lab ZAO Affected Versions: 15.0.2.361 Tested Versions: 15.0.2.361 Vulnerability Type: Use of a One-Way Hash without a Salt CWE-759 Risk Level: Low Solution Status:...
APPLE-SA-2015-09-16-2 Xcode 7.0
APPLE-SA-2015-09-16-2 Xcode 7.0 Xcode 7.0 is now available and addresses the following: DevTools Available for: OS X Yosemite v10.10.4 or later Impact: An attacker may be able to bypass access restrictions Description: An API issue existed in the apache configuration. This issue was addressed by...
libicu memory corruption
Memory corruption on symbols parsing...
APPLE-SA-2015-09-16-1 iOS 9
APPLE-SA-2015-09-16-1 iOS 9 iOS 9 is now available and addresses the following: Apple Pay Available for: iPhone 6, iPad mini 3, and iPad Air 2 Impact: Some cards may allow a terminal to retrieve limited recent transaction information when making a payment Description: The transaction log...
APPLE-SA-2015-09-16-3 iTunes 12.3
APPLE-SA-2015-09-16-3 iTunes 12.3 iTunes 12.3 is now available and addresses the following: iTunes Available for: Windows 7 and later Impact: Applications that use CoreText may be vulnerable to unexpected application termination or arbitrary code execution Description: Multiple memory corruption...
APPLE-SA-2015-09-30-01 iOS 9.0.2
APPLE-SA-2015-09-30-01 iOS 9.0.2 iOS 9.0.2 is now available and addresses the following: Lock Screen Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A person with physical access to an iOS device may be able to access photos and contacts from the...
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11 OS X El Capitan 10.11 is now available and addresses the following: Address Book Available for: Mac OS X v10.6.8 and later Impact: A local attacker may be able to inject arbitrary code to processes loading the Address Book framework Description: An issu...
Linux kernel multiple security vulnerabilities
Multiple USB over WiFi memory corruptions, DoS, race conditions...
Microsoft Office multiple security vulnerabilities
Multiple memory corruptions...
Microsoft Windows multiple security vulnerabilities
Multiple vulnerabilities in Edge and Internet Explorer, code execution in graphics and journaling, mediascenter, .Net framework, task management, Active Directory, Hyper-V...
vzctl privilege escalation
It's possible to get control over ploop-based containers...
[SECURITY] [DSA 3357-1] vzctl security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3357-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 13, 2015 https://www.debian.org/security/faq -...
Microsoft Lync Server / Skype for Business crossite scripting
Multiple crossite scripting possibilities...
[security bulletin] HPSBMU03392 rev.2 - HP ArcSight Logger, Remote Authorization Bypass
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04762372 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04762372 Version: 2 HPSBMU03392 rev.2 - HP ArcSight Logger, Remote Authorization...
[SECURITY] [DSA 3358-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3358-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 13, 2015 https://www.debian.org/security/faq...
PHP multiple security vulnerabilities
No description provided...
Google Chrome / Oxide multiple security vulnerabilities
Restrictions bypass, DoS, memory corruptions, information disclosure...
Netgear Prosafe multiple security vulnerabilities
Authentication bypass, privilege escalation...
ESA-2015-140: RSA® Identity Management & Governance Multiple Cross-Site Scripting Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-140: RSA® Identity Management & Governance Multiple Cross-Site Scripting Vulnerabilities EMC Identifier: ESA-2015-140 CVE Identifier: CVE-2015-4539, CVE-2015-4540 Severity Rating: CVSS v2 Base Score: See below for individual scores Affected...
[security bulletin] HPSBGN03387 rev.1 - HP Intelligent Provisioning, Remote Code Execution, Unauthorized Access
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04756070 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04756070 Version: 1 HPSBGN03387 rev.1 - HP Intelligent Provisioning, Remote Code...
Multiple Cross-Site Scripting vulnerabilities in Synology Download Station
------------------------------------------------------------------------ Multiple Cross-Site Scripting vulnerabilities in Synology Download Station ------------------------------------------------------------------------ Han Sahin, September 2015...
OpenLDAP DoS
Crash on processing BER data...
[ERPSCAN-15-015] SAP NetWeaver AS ABAP– Hardcoded Credentials
ERPSCAN Research Advisory ERPSCAN-15-015 SAP NetWeaver AS ABAP– Hardcoded Credentials Application: SAP NetWeaver Versions Affected: SAP NetWeaver AS ABAP, probably others Vendor URL: http://SAP.com Bugs: Hardcoded credentials Sent: 06.03.2014 Reported: 07.03.2014 Vendor response: 07.03.2014 Date ...
HP Virtual Connect Enterprise Manager / HP Matrix Operating Environment multiple security vulnerabilities
Information disclosure...
[SECURITY] [DSA 3356-1] openldap security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3356-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 12, 2015 https://www.debian.org/security/faq...
[security bulletin] HPSBGN03504 rev.1 - HP UCMDB, Local Disclosure of Sensitive Information
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04790231 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04790231 Version: 1 HPSBGN03504 rev.1 - HP UCMDB, Local Disclosure of Sensitive...
OpenSLP double free() vulnerability
No description provided...
HP UCMDB information discosure
No description provided...
[security bulletin] HPSBMU03396 rev.1 - HP Version Control Repository Manager (VCRM) on Windows and Linux, Multiple Vulnerabilities
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04765115 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04765115 Version: 1 HPSBMU03396 rev.1 - HP Version Control Repository Manager VCR...
Webroot SecureAnywhere Mobile Protection - MITM SSL Certificate Vulnerability
Webroot SecureAnywhere Mobile Protection - MITM SSL Certificate Vulnerability -- http://www.info-sec.ca/advisories/Webroot-SecureAnywhere.html Overview "Webroot SecureAnywhere Business – Mobile Protection provides essential security for iPhones and iPads and includes lost device protection that...
[security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04774019 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04774019 Version: 1 HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple...
screen stack overflow
Stack overflow leads to application crash...
Avira Mobile Security iOS Application - Cleartext Credentials Vulnerability
Avira Mobile Security iOS Application - Cleartext Credentials Vulnerability -- http://www.info-sec.ca/advisories/Avira-Mobile-Security.html Overview "Avira Mobile Security is the ideal tool to recover a lost phone and ensure that your email has not been compromised." "Avira Mobile Security helps...
EMC Documentum multiple security vulnerabilities
Code injection, privilege escalation...
HP lt4112 4G adapters code execution
No description provided...
HP Intelligent Provisioning code execution
No description provided...
Synology Video Station command injection and multiple SQL injection vulnerabilities
------------------------------------------------------------------------ Synology Video Station command injection and multiple SQL injection vulnerabilities ------------------------------------------------------------------------ Han Sahin, September 2015...
[USN-2735-1] Oxide vulnerabilities
========================================================================== Ubuntu Security Notice USN-2735-1 September 08, 2015 oxide-qt vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...
[ERPSCAN-15-016] SAP NetWeaver – Hardcoded credentials
ERPSCAN Research Advisory ERPSCAN-15-016 SAP NetWeaver – Hardcoded credentials Application: SAP NetWeaver Versions Affected: SAP NetWeaver AS ABAP, probably others Vendor URL: http://SAP.com Bugs: Hardcoded credentials Sent: 06.03.2014 Reported: 07.03.2014 Vendor response: 07.03.2014 Date of Publ...
EMC RSA Identity Management & Governance crossite scripting
No description provided...
Synology Video Station security vulnerabilities
SQL injections, commands injection...
[ERPSCAN-15-014] SAP Mobile Platform 3 – XXE in Add Repository
ERPSCAN Research Advisory ERPSCAN-15-014 SAP Mobile Platform 3 – XXE in Add Repository Application: SAP Mobile Platform Versions Affected: SAP Mobile Platform 3, probably others Vendor URL: http://SAP.com Bugs: XML External Entity Sent: 13.03.2015 Reported: 14.03.2015 Vendor response: 14.03.2015...