47153 matches found
APPLE-SA-2014-06-30-1 Safari 6.1.5 and Safari 7.0.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-1 Safari 6.1.5 and Safari 7.0.5 Safari 6.1.5 and Safari 7.0.5 are now available and address the following: WebKit Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.3 Impact...
Barracuda Networks Web Application Firewall v6.1.5 & LoadBalancer v4.2.2 #37 - Filter Bypass & Multiple Vulnerabilities
Document Title: =============== Barracuda Networks Web Application Firewall v6.1.5 & LoadBalancer v4.2.2 37 - Filter Bypass & Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1103 Barracuda Networks Security ID BNSEC: BNSEC-1263...
[security bulletin] HPSBGN02936 rev.1 - HP and H3C VPN Firewall Module Products, Remote Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03993467 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03993467 Version: 1 HPSBGN02936 rev....
TigerCom iFolder+ v1.2 iOS - Multiple Vulnerabilities
Document Title: =============== TigerCom iFolder+ v1.2 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1284 Release Date: ============= 2014-07-30 Vulnerability Laboratory ID VL-ID: ==================================== 1284...
[USN-2304-1] KDE-Libs vulnerability
========================================================================== Ubuntu Security Notice USN-2304-1 July 31, 2014 kde4libs vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
[Onapsis Security Advisory 2014-025] Multiple Cross Site Scripting Vulnerabilities in SAP HANA XS Administration Tool
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2014-025: Multiple Cross Site Scripting Vulnerabilities in SAP HANA XS Administration Tool This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource...
[USN-2303-1] Unity vulnerability
========================================================================== Ubuntu Security Notice USN-2303-1 July 31, 2014 unity vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...
[security bulletin] HPSBMU03081 rev.1 - HP Enterprise Maps, Remote Information Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04390793 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04390793 Version: 1 HPSBMU03081 rev....
Photo Org WonderApplications v8.3 iOS - File Include Vulnerability
Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04 Vulnerability Laboratory ID VL-ID:...
Windows Mail privilege escalation
Insufficient path on executable call...
[security bulletin] HPSBMU03073 rev.1 - HP Network Virtualization, Remote Execution of Code, Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04374202 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04374202 Version: 1 HPSBMU03073 rev....
[SECURITY] [DSA 2993-1] tor security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2993-1 [email protected] http://www.debian.org/security/ Peter Palfrader July 31, 2014 http://www.debian.org/security/faq -...
tor user deanonymizing
User deanonimization via Relay-early cells...
HP Enterprise Maps information leakage
No description provided...
Photo WiFi Transfer 1.01 - Directory Traversal Vulnerability
Document Title: =============== Photo WiFi Transfer 1.01 - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1285 Release Date: ============= 2014-07-31 Vulnerability Laboratory ID VL-ID: ==================================...
HP Network Virtualization, code execution
No description provided...
APPLE-SA-2014-06-30-2 OS X Mavericks 10.9.4 and Security Update 2014-003
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-2 OS X Mavericks 10.9.4 and Security Update 2014-003 OS X Mavericks 10.9.4 and Security Update 2014-003 are now available and address the following: Certificate Trust Policy Available for: OS X Lion v10.7.5, OS X Lion Server v10.7....
Apple Mac OS X multiple security vulnerabilities
Multiple memory corruptions, information leakages, DoS, privilege escalation, screen lock bypass...
Cisco Unified Communications Domain Manager multiple security vulnerabilities
Default ssh-key, privilege escalation, SSRF...
C++11 <regex> insecure by default
C++11 regex insecure by default http://cxsecurity.com/issue/WLB-2014070187 --- 0 Description --- In this article I will present a conclusion of testing the new 'objective regex' in several implementation of standard c++ library like libcxx clang and stdlibc++ gcc. The results show the weakness in...
APPLE-SA-2014-06-30-3 iOS 7.1.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-3 iOS 7.1.2 iOS 7.1.2 is now available and addresses the following: Certificate Trust Policy Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: Update to the certificate trust policy...
[Onapsis Security Advisory 2014-024] Hard-coded Username in SAP FI Manager Self-Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2014-024: Hard-coded Username in SAP FI Manager Self-Service This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to...
[Onapsis Security Advisory 2014-023] HTTP verb tampering issue in SAP_JTECHS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory2014-023: HTTP verb tampering issue in SAPJTECHS This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...
[ MDVSA-2014:148 ] dbus
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:148 http://www.mandriva.com/en/support/security/ Package : dbus Date : July 31, 2014 Affected: Business Server 1.0 Problem Description: Updated dbus packages fix security vulnerabilities: A flaw was reported...
Videolan vlc multiple security vulnerabilities
Buffer overflows on different video formats parsing...
[SECURITY] [DSA 2990-1] cups security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2990-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 27, 2014 http://www.debian.org/security/faq -...
CUPS unauthorized files access
Unauthorized access to RSS files...
ESA-2014-060: EMC Documentum eRoom Multiple Cross-Site Scripting Vulnerabilities
ESA-2014-060.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-060: EMC Documentum eRoom Multiple Cross-Site Scripting Vulnerabilities EMC Identifier: ESA-2014-060 CVE Identifier: CVE-2014-2512 Severity Rating: CVSS v2 Base Score: 8 AV:N/AC:L/Au:S/C:C/I:P/A:P Affected products: • EMC...
Apache multiple security vulnerabilities
modstatus buffer overflow, modproxy, moddeflate, modcgid DoS...
Barracuda Networks Spam&Virus Firewall v6.0.2 (600 & Vx) - Client Side Cross Site Vulnerability
Document Title: =============== Barracuda Networks Spam&Virus Firewall v6.0.2 600 & Vx - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=890 Barracuda Networks Security ID BNSEC: BNSEC-1176...
SEC Consult SA-20140701-0 :: Stored cross-site scripting vulnerabilities in EMC Documentum eRoom
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20140701-0 ======================================================================= title: Stored cross-site scripting vulnerabilities product: EMC Documentum eRoom vulnerable version: 7.4.3, 7.4.4, 7.4.4...
[SECURITY] [DSA 2973-1] vlc security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2973-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 07, 2014 http://www.debian.org/security/faq -...
Barracuda Networks #35 Web Firewall 610 v6.0.1 - Filter Bypass & Persistent Vulnerability
Document Title: =============== Barracuda Networks 35 Web Firewall 610 v6.0.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1101 Barracuda Networks Security ID BNSEC: BNSEC-2361...
ESA-2014-064: EMC Documentum Content Server Privilege Escalation Vulnerabilities
ESA-2014-064.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-064: EMC Documentum Content Server Privilege Escalation Vulnerabilities EMC Identifier: ESA-2014-064 CVE Identifier: CVE-2014-2513, CVE-2014-2514 Severity Rating: CVSS v2 Base Score: Refer below for scores for each CVE...
[USN-2299-1] Apache HTTP Server vulnerabilities
========================================================================== Ubuntu Security Notice USN-2299-1 July 23, 2014 apache2 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Barracuda Networks Spam&Virus Firewall v5.1.3 - Client Side Cross Site Vulnerability
Document Title: =============== Barracuda Networks Spam&Virus Firewall v5.1.3 - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1118 Barracuda Networks Security ID BNSEC: BNSEC-1052...
ESA-2014-057: EMC Documentum Foundation Services (DFS) XML External Entity (XXE) Vulnerability
ESA-2014-057.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-057: EMC Documentum Foundation Services DFS XML External Entity XXE Vulnerability EMC Identifier: ESA-2014-057 CVE Identifier: CVE-2014-2510 Severity Rating: CVSS v2 Base Score: 8 AV:N/AC:L/Au:S/C:C/I:P/A:P Affected products:...
Barracuda Networks Firewall 6.1.2 #36 - Filter Bypass & Exception Handling Vulnerability + PoC Video BNSEC-2398
Document Title: =============== Barracuda Networks Firewall 6.1.2 36 - Filter Bypass & Exception Handling Vulnerability + PoC Video References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1102 Barracuda Networks Security ID BNSEC: BNSEC-2398...
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
Multiple memory corruptions and buffer overflows...
Barracuda Networks Firewall 6.1.5 - Filter Bypass & Persistent Vulnerabilities
Document Title: =============== Barracuda Networks Firewall 6.1.5 - Filter Bypass & Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1065 Barracuda Networks Security ID BNSEC: BNSEC-2067...
KL-001-2014-003 : Microsoft XP SP3 MQAC.sys Arbitrary Write Privilege Escalation
Title: Microsoft XP SP3 MQAC.sys Arbitrary Write Privilege Escalation Advisory ID: KL-001-2014-003 Publication Date: 2014.07.18 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2014-003.txt 1. Vulnerability Details Affected Vendor: Microsoft Affected Product: MQ Access Contr...
HP StoreVirtual security vulnerabilities
Information leakage, privilege escalation...
[security bulletin] HPSBHF02913 rev.1 - HP Intelligent Management Center (iMC) and HP Branch Intelligent Management System (BIMS), Remote Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04369484 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04369484 Version: 1 HPSBHF02913 rev....
Nessus Web UI information leakage
Information leakage via Web...
liblzo integer overflow
Integer overflow on LZO decompression...
HP Intelligent Management Center / HP Branch Intelligent Management System information leakage
No description provided...
[ MDVSA-2014:133 ] gd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:133 http://www.mandriva.com/en/support/security/ Package : gd Date : July 10, 2014 Affected: Business Server 1.0 Problem Description: Updated gd and libgd packages fix security vulnerability: The...
libgd / PHP DoS
NULL pointer dereference on XPM files parsing...
Microsoft Windows XP privilege escalation
BthPan.sys and MQAC.sys privilege escalation...
[USN-2293-1] CUPS vulnerability
========================================================================== Ubuntu Security Notice USN-2293-1 July 21, 2014 cups vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...