47153 matches found
Linux kernel multiple security vulnerabilities
DoS via ptrace syscall, filesystems mount options limitation bypass...
ESA-2014-055: EMC Network Configuration Manager (NCM) Report Advisor Session Fixation Vulnerability
ESA-2014-055.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-055: EMC Network Configuration Manager NCM Report Advisor Session Fixation Vulnerability EMC Identifier: ESA-2014-055 CVE Identifier: CVE-2014-2509 Severity Rating: CVSS v2 Base Score: 6.9 AV:A/AC:M/Au:N/C:C/I:P/A:P Affected...
EMC Network Configuration Manager session fixation
Report Advisor session fixation...
HP Application Lifecycle Management / Quality Center privilege escalation
No description provided...
[security bulletin] HPSBHF03084 rev.1 HP PCs with UEFI Firmware, Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04393276 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04393276 Version: 1 HPSBHF03084 rev....
HP desktops and notebooks code execution
UEFI firmware code execution...
readline library symbolic links vulnerability
Symbolic links vulnerability in rltropen...
Cisco IOS DoS
EnergyWise module DoS, UDP/43440 and TCP/43440...
glibc use-after-free
posixspawnfileactionsaddopen use-fater-free...
Video WiFi Transfer 1.01 - Directory Traversal Vulnerability
Document Title: =============== Video WiFi Transfer 1.01 - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1288 Release Date: ============= 2014-08-02 Vulnerability Laboratory ID VL-ID: ==================================...
CVE-2014-2595 - Authentication Bypass in Barracuda Web Application Firewall
Vulnerability title: Authentication Bypass in Barracuda Web Application Firewall CVE: CVE-2014-2595 Vendor: Barracuda Product: Web Application Firewall Affected version: Firmware v7.8.1.013 Fixed version: N/A Reported by: Nick Hayes Details: It is possible to re-use a link which includes a...
CVE-2014-5075 MitM Vulnerability in the Smack XMPP Library for Java
CVE-2014-5075 MitM Vulnerability in the Smack XMPP Library for Java =================================================================== Smack http://www.igniterealtime.org/projects/smack/ is an Open Source XMPP Jabber client library for instant messaging and presence written in Java. Smack prior ...
GnuPG Made Easy memory corruption
Memory corruption on certificates parsing...
[security bulletin] HPSBMU03086 rev.1 - HP Operations Agent running Glance, Local Elevation of Privilege
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04394554 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04394554 Version: 1 HPSBMU03086 rev....
PhotoSync Wifi & Bluetooth v1.0 - File Include Vulnerability
Document Title: =============== PhotoSync Wifi & Bluetooth v1.0 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1289 Release Date: ============= 2014-08-04 Vulnerability Laboratory ID VL-ID: ==================================...
[ MDVSA-2014:154 ] readline
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:154 http://www.mandriva.com/en/support/security/ Package : readline Date : August 6, 2014 Affected: Business Server 1.0 Problem Description: Updated readline packages fix security vulnerability: Steve Kemp...
Snack insufficient certificate check
Server hostname is not checked...
[slackware-security] dhcpcd (SSA:2014-213-02)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security dhcpcd SSA:2014-213-02 New dhcpcd packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...
(CVE-2014-3501/2/3) Apache Cordova for Android - Multiple Vulnerabilities
Hi, We have recently discovered a severe Cross-Application Scripting XAS vulnerability in Apache Cordova for Android. This vulnerability enables theft of sensitive information from Crodova-based apps both locally by malware and also remotely by using drive-by exploitation techniques. In addition,...
[USN-2307-1] GPGME vulnerability
========================================================================== Ubuntu Security Notice USN-2307-1 August 06, 2014 gpgme1.0 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Easy FTP Pro v4.2 iOS - Command Inject Vulnerabilities
Document Title: =============== Easy FTP Pro v4.2 iOS - Command Inject Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1291 Release Date: ============= 2014-08-06 Vulnerability Laboratory ID VL-ID: ==================================== 129...
Apache Cordova multiple security vulnerabilities
Cross application scripting, restrictions bypass, information leakage...
[ MDVSA-2014:157 ] ipython
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:157 http://www.mandriva.com/en/support/security/ Package : ipython Date : August 8, 2014 Affected: Business Server 1.0 Problem Description: Updated ipython package fixes security vulnerability: In IPython...
[USN-2274-1] Linux kernel vulnerability
========================================================================== Ubuntu Security Notice USN-2274-1 July 05, 2014 linux vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...
[security bulletin] HPSBMU03085 rev.1 - HP Application Lifecycle Management / Quality Center, Elevation of Privilege
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04394553 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04394553 Version: 1 HPSBMU03085 rev....
dhcpcd DoS
Infinite loop on server response parsing...
[ MDVSA-2014:152 ] glibc
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:152 http://www.mandriva.com/en/support/security/ Package : glibc Date : August 6, 2014 Affected: Business Server 1.0 Problem Description: Updated glibc packages fix security issues: Stephane Chazelas...
FreeDisk v1.01 iOS - Multiple Web Vulnerabilities
Document Title: =============== FreeDisk v1.01 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1287 Release Date: ============= 2014-08-01 Vulnerability Laboratory ID VL-ID: ==================================== 1287...
PhotoSync v2.2 iOS - Command Inject Web Vulnerability
Document Title: =============== PhotoSync v2.2 iOS - Command Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1290 Release Date: ============= 2014-08-05 Vulnerability Laboratory ID VL-ID: ==================================== 1290...
HP Operations Agent privilege escalation
Privilege escalation via Glance...
IPython code execution
notebook server doesn't check websocket source...
wireshark multiple security vulnerabilities
Memory corruptions and DoS in different dissectors...
[ MDVSA-2014:159 ] wireshark
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:159 http://www.mandriva.com/en/support/security/ Package : wireshark Date : August 8, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in...
OpenSSL multiple security vulnerabilities
DoS and protocol version downgrades in client and server code, memory corruptions and information leaks in client code...
HP Network Virtualization, code execution
No description provided...
[USN-2305-1] Samba vulnerability
========================================================================== Ubuntu Security Notice USN-2305-1 August 01, 2014 samba vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...
APPLE-SA-2014-06-30-3 iOS 7.1.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-3 iOS 7.1.2 iOS 7.1.2 is now available and addresses the following: Certificate Trust Policy Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: Update to the certificate trust policy...
HP / H3C VPN Firewall Module DoS
No description provided...
Photo WiFi Transfer 1.01 - Directory Traversal Vulnerability
Document Title: =============== Photo WiFi Transfer 1.01 - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1285 Release Date: ============= 2014-07-31 Vulnerability Laboratory ID VL-ID: ==================================...
[Onapsis Security Advisory 2014-022] SAP HANA IU5 SDK Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory2014-022: SAP HANA IU5 SDK Authentication Bypass This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...
Unity screen lock protection bypass
Under some conditions keyboard is not blocked...
[USN-2303-1] Unity vulnerability
========================================================================== Ubuntu Security Notice USN-2303-1 July 31, 2014 unity vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...
Samba memory corruption
Memory corruption on NetBIOS name resolution request parsing...
KDE restrictions bypass
Kauth polkit authorization check bypass...
Photo Org WonderApplications v8.3 iOS - File Include Vulnerability
Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04 Vulnerability Laboratory ID VL-ID:...
tor user deanonymizing
User deanonimization via Relay-early cells...
WiFi HD v7.3.0 iOS - Multiple Web Vulnerabilities
Document Title: =============== WiFi HD v7.3.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1283 Release Date: ============= 2014-07-29 Vulnerability Laboratory ID VL-ID: ==================================== 1283...
Apple iOS multiple security vulnerabilities
Повреждения памяти, DoS, обход ограничений...
APPLE-SA-2014-06-30-2 OS X Mavericks 10.9.4 and Security Update 2014-003
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-2 OS X Mavericks 10.9.4 and Security Update 2014-003 OS X Mavericks 10.9.4 and Security Update 2014-003 are now available and address the following: Certificate Trust Policy Available for: OS X Lion v10.7.5, OS X Lion Server v10.7....
[Onapsis Security Advisory 2014-025] Multiple Cross Site Scripting Vulnerabilities in SAP HANA XS Administration Tool
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2014-025: Multiple Cross Site Scripting Vulnerabilities in SAP HANA XS Administration Tool This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource...