[USN-2318-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-2318-1 August 18, 2014 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

[USN-2307-1] GPGME vulnerability

========================================================================== Ubuntu Security Notice USN-2307-1 August 06, 2014 gpgme1.0 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Apache Cordova multiple security vulnerabilities

Cross application scripting, restrictions bypass, information leakage...

Cisco IOS DoS

EnergyWise module DoS, UDP/43440 and TCP/43440...

dhcpcd DoS

Infinite loop on server response parsing...

[security bulletin] HPSBMU03085 rev.1 - HP Application Lifecycle Management / Quality Center, Elevation of Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04394553 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04394553 Version: 1 HPSBMU03085 rev....

(CVE-2014-3501/2/3) Apache Cordova for Android - Multiple Vulnerabilities

Hi, We have recently discovered a severe Cross-Application Scripting XAS vulnerability in Apache Cordova for Android. This vulnerability enables theft of sensitive information from Crodova-based apps both locally by malware and also remotely by using drive-by exploitation techniques. In addition,...

ESA-2014-055: EMC Network Configuration Manager (NCM) Report Advisor Session Fixation Vulnerability

ESA-2014-055.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-055: EMC Network Configuration Manager NCM Report Advisor Session Fixation Vulnerability EMC Identifier: ESA-2014-055 CVE Identifier: CVE-2014-2509 Severity Rating: CVSS v2 Base Score: 6.9 AV:A/AC:M/Au:N/C:C/I:P/A:P Affected...

[slackware-security] dhcpcd (SSA:2014-213-02)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security dhcpcd SSA:2014-213-02 New dhcpcd packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...

CVE-2014-5075 MitM Vulnerability in the Smack XMPP Library for Java

CVE-2014-5075 MitM Vulnerability in the Smack XMPP Library for Java =================================================================== Smack http://www.igniterealtime.org/projects/smack/ is an Open Source XMPP Jabber client library for instant messaging and presence written in Java. Smack prior ...

Video WiFi Transfer 1.01 - Directory Traversal Vulnerability

Document Title: =============== Video WiFi Transfer 1.01 - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1288 Release Date: ============= 2014-08-02 Vulnerability Laboratory ID VL-ID: ==================================...

HP Application Lifecycle Management / Quality Center privilege escalation

No description provided...

readline library symbolic links vulnerability

Symbolic links vulnerability in rltropen...

IPython code execution

notebook server doesn't check websocket source...

Snack insufficient certificate check

Server hostname is not checked...

HP Operations Agent privilege escalation

Privilege escalation via Glance...

Easy FTP Pro v4.2 iOS - Command Inject Vulnerabilities

Document Title: =============== Easy FTP Pro v4.2 iOS - Command Inject Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1291 Release Date: ============= 2014-08-06 Vulnerability Laboratory ID VL-ID: ==================================== 129...

[ MDVSA-2014:157 ] ipython

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:157 http://www.mandriva.com/en/support/security/ Package : ipython Date : August 8, 2014 Affected: Business Server 1.0 Problem Description: Updated ipython package fixes security vulnerability: In IPython...

[ MDVSA-2014:154 ] readline

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:154 http://www.mandriva.com/en/support/security/ Package : readline Date : August 6, 2014 Affected: Business Server 1.0 Problem Description: Updated readline packages fix security vulnerability: Steve Kemp...

[security bulletin] HPSBMU03086 rev.1 - HP Operations Agent running Glance, Local Elevation of Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04394554 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04394554 Version: 1 HPSBMU03086 rev....

FreeDisk v1.01 iOS - Multiple Web Vulnerabilities

Document Title: =============== FreeDisk v1.01 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1287 Release Date: ============= 2014-08-01 Vulnerability Laboratory ID VL-ID: ==================================== 1287...

[USN-2274-1] Linux kernel vulnerability

========================================================================== Ubuntu Security Notice USN-2274-1 July 05, 2014 linux vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...

EMC Network Configuration Manager session fixation

Report Advisor session fixation...

HP desktops and notebooks code execution

UEFI firmware code execution...

GnuPG Made Easy memory corruption

Memory corruption on certificates parsing...

PhotoSync Wifi & Bluetooth v1.0 - File Include Vulnerability

Document Title: =============== PhotoSync Wifi & Bluetooth v1.0 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1289 Release Date: ============= 2014-08-04 Vulnerability Laboratory ID VL-ID: ==================================...

[security bulletin] HPSBHF03084 rev.1 HP PCs with UEFI Firmware, Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04393276 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04393276 Version: 1 HPSBHF03084 rev....

CVE-2014-2595 - Authentication Bypass in Barracuda Web Application Firewall

Vulnerability title: Authentication Bypass in Barracuda Web Application Firewall CVE: CVE-2014-2595 Vendor: Barracuda Product: Web Application Firewall Affected version: Firmware v7.8.1.013 Fixed version: N/A Reported by: Nick Hayes Details: It is possible to re-use a link which includes a...

PhotoSync v2.2 iOS - Command Inject Web Vulnerability

Document Title: =============== PhotoSync v2.2 iOS - Command Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1290 Release Date: ============= 2014-08-05 Vulnerability Laboratory ID VL-ID: ==================================== 1290...

[ MDVSA-2014:152 ] glibc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:152 http://www.mandriva.com/en/support/security/ Package : glibc Date : August 6, 2014 Affected: Business Server 1.0 Problem Description: Updated glibc packages fix security issues: Stephane Chazelas...

glibc use-after-free

posixspawnfileactionsaddopen use-fater-free...

[ MDVSA-2014:159 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:159 http://www.mandriva.com/en/support/security/ Package : wireshark Date : August 8, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in...

wireshark multiple security vulnerabilities

Memory corruptions and DoS in different dissectors...

OpenSSL multiple security vulnerabilities

DoS and protocol version downgrades in client and server code, memory corruptions and information leaks in client code...

APPLE-SA-2014-06-30-4 Apple TV 6.1.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-4 Apple TV 6.1.2 Apple TV 6.1.2 is now available and addresses the following: Apple TV Available for: Apple TV 2nd generation and later Impact: An application could cause the device to unexpectedly restart Description: A null point...

dbus security vulnerabilities

Few DoS conditions...

HP / H3C VPN Firewall Module DoS

No description provided...

[Onapsis Security Advisory 2014-024] Hard-coded Username in SAP FI Manager Self-Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2014-024: Hard-coded Username in SAP FI Manager Self-Service This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to...

Beginner's error: import function of Windows Mail executes rogue program C:\Program.exe with credentials of other account

Hi @ll, the import function of Windows Mail executes a rogue program C:Program.exe with the credentials of another account, resulting in a privilege escalation! 1. Fetch http://home.arcor.de/skanthak/download/SENTINEL.EXE and save it as C:Program.exe 2. Start Windows Mail part of Windows Vista an...

[Onapsis Security Advisory 2014-022] SAP HANA IU5 SDK Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory2014-022: SAP HANA IU5 SDK Authentication Bypass This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...

[USN-2305-1] Samba vulnerability

========================================================================== Ubuntu Security Notice USN-2305-1 August 01, 2014 samba vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...

[ MDVSA-2014:148 ] dbus

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:148 http://www.mandriva.com/en/support/security/ Package : dbus Date : July 31, 2014 Affected: Business Server 1.0 Problem Description: Updated dbus packages fix security vulnerabilities: A flaw was reported...

[USN-2297-1] acpi-support vulnerability

========================================================================== Ubuntu Security Notice USN-2297-1 July 22, 2014 acpi-support vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

[Onapsis Security Advisory 2014-023] HTTP verb tampering issue in SAP_JTECHS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory2014-023: HTTP verb tampering issue in SAPJTECHS This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...

[Onapsis Security Advisory 2014-026] Missing authorization check in function modules of BW-SYS-DB-DB4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2014-026: Missing authorization check in function modules of BW-SYS-DB-DB4 This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will ga...

WiFi HD v7.3.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== WiFi HD v7.3.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1283 Release Date: ============= 2014-07-29 Vulnerability Laboratory ID VL-ID: ==================================== 1283...

KDE restrictions bypass

Kauth polkit authorization check bypass...

Apple TV multiple security vulnerabilities

DoS, memory corruptions, unauthrized access to iTunes store...

Apple iOS multiple security vulnerabilities

Повреждения памяти, DoS, обход ограничений...

Samba memory corruption

Memory corruption on NetBIOS name resolution request parsing...