47153 matches found
gcc regular expressions security vulnerabilities
Resources exhaustion and memory corruptions in stdc regular expressions...
Unity screen lock protection bypass
Under some conditions keyboard is not blocked...
[USN-2305-1] Samba vulnerability
========================================================================== Ubuntu Security Notice USN-2305-1 August 01, 2014 samba vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...
APPLE-SA-2014-06-30-1 Safari 6.1.5 and Safari 7.0.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-1 Safari 6.1.5 and Safari 7.0.5 Safari 6.1.5 and Safari 7.0.5 are now available and address the following: WebKit Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.3 Impact...
TigerCom iFolder+ v1.2 iOS - Multiple Vulnerabilities
Document Title: =============== TigerCom iFolder+ v1.2 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1284 Release Date: ============= 2014-07-30 Vulnerability Laboratory ID VL-ID: ==================================== 1284...
tor user deanonymizing
User deanonimization via Relay-early cells...
APPLE-SA-2014-06-30-3 iOS 7.1.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-3 iOS 7.1.2 iOS 7.1.2 is now available and addresses the following: Certificate Trust Policy Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: Update to the certificate trust policy...
[security bulletin] HPSBMU03081 rev.1 - HP Enterprise Maps, Remote Information Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04390793 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04390793 Version: 1 HPSBMU03081 rev....
[USN-2304-1] KDE-Libs vulnerability
========================================================================== Ubuntu Security Notice USN-2304-1 July 31, 2014 kde4libs vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
[Onapsis Security Advisory 2014-025] Multiple Cross Site Scripting Vulnerabilities in SAP HANA XS Administration Tool
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2014-025: Multiple Cross Site Scripting Vulnerabilities in SAP HANA XS Administration Tool This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource...
HP Network Virtualization, code execution
No description provided...
Barracuda Networks Web Application Firewall v6.1.5 & LoadBalancer v4.2.2 #37 - Filter Bypass & Multiple Vulnerabilities
Document Title: =============== Barracuda Networks Web Application Firewall v6.1.5 & LoadBalancer v4.2.2 37 - Filter Bypass & Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1103 Barracuda Networks Security ID BNSEC: BNSEC-1263...
[Onapsis Security Advisory 2014-023] HTTP verb tampering issue in SAP_JTECHS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory2014-023: HTTP verb tampering issue in SAPJTECHS This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...
[USN-2297-1] acpi-support vulnerability
========================================================================== Ubuntu Security Notice USN-2297-1 July 22, 2014 acpi-support vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Beginner's error: import function of Windows Mail executes rogue program C:\Program.exe with credentials of other account
Hi @ll, the import function of Windows Mail executes a rogue program C:Program.exe with the credentials of another account, resulting in a privilege escalation! 1. Fetch http://home.arcor.de/skanthak/download/SENTINEL.EXE and save it as C:Program.exe 2. Start Windows Mail part of Windows Vista an...
Apple iOS multiple security vulnerabilities
Повреждения памяти, DoS, обход ограничений...
Samba memory corruption
Memory corruption on NetBIOS name resolution request parsing...
[security bulletin] HPSBGN02936 rev.1 - HP and H3C VPN Firewall Module Products, Remote Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03993467 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03993467 Version: 1 HPSBGN02936 rev....
KDE restrictions bypass
Kauth polkit authorization check bypass...
[Onapsis Security Advisory 2014-022] SAP HANA IU5 SDK Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory2014-022: SAP HANA IU5 SDK Authentication Bypass This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...
APPLE-SA-2014-06-30-4 Apple TV 6.1.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-4 Apple TV 6.1.2 Apple TV 6.1.2 is now available and addresses the following: Apple TV Available for: Apple TV 2nd generation and later Impact: An application could cause the device to unexpectedly restart Description: A null point...
Apple TV multiple security vulnerabilities
DoS, memory corruptions, unauthrized access to iTunes store...
APPLE-SA-2014-06-30-2 OS X Mavericks 10.9.4 and Security Update 2014-003
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-2 OS X Mavericks 10.9.4 and Security Update 2014-003 OS X Mavericks 10.9.4 and Security Update 2014-003 are now available and address the following: Certificate Trust Policy Available for: OS X Lion v10.7.5, OS X Lion Server v10.7....
Apple Mac OS X multiple security vulnerabilities
Multiple memory corruptions, information leakages, DoS, privilege escalation, screen lock bypass...
ESA-2014-057: EMC Documentum Foundation Services (DFS) XML External Entity (XXE) Vulnerability
ESA-2014-057.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-057: EMC Documentum Foundation Services DFS XML External Entity XXE Vulnerability EMC Identifier: ESA-2014-057 CVE Identifier: CVE-2014-2510 Severity Rating: CVSS v2 Base Score: 8 AV:N/AC:L/Au:S/C:C/I:P/A:P Affected products:...
ESA-2014-064: EMC Documentum Content Server Privilege Escalation Vulnerabilities
ESA-2014-064.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-064: EMC Documentum Content Server Privilege Escalation Vulnerabilities EMC Identifier: ESA-2014-064 CVE Identifier: CVE-2014-2513, CVE-2014-2514 Severity Rating: CVSS v2 Base Score: Refer below for scores for each CVE...
[SECURITY] [DSA 2990-1] cups security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2990-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 27, 2014 http://www.debian.org/security/faq -...
CUPS unauthorized files access
Unauthorized access to RSS files...
SEC Consult SA-20140701-0 :: Stored cross-site scripting vulnerabilities in EMC Documentum eRoom
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20140701-0 ======================================================================= title: Stored cross-site scripting vulnerabilities product: EMC Documentum eRoom vulnerable version: 7.4.3, 7.4.4, 7.4.4...
Barracuda Networks Spam&Virus Firewall v5.1.3 - Client Side Cross Site Vulnerability
Document Title: =============== Barracuda Networks Spam&Virus Firewall v5.1.3 - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1118 Barracuda Networks Security ID BNSEC: BNSEC-1052...
[USN-2299-1] Apache HTTP Server vulnerabilities
========================================================================== Ubuntu Security Notice USN-2299-1 July 23, 2014 apache2 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Videolan vlc multiple security vulnerabilities
Buffer overflows on different video formats parsing...
Barracuda Networks Firewall 6.1.2 #36 - Filter Bypass & Exception Handling Vulnerability + PoC Video BNSEC-2398
Document Title: =============== Barracuda Networks Firewall 6.1.2 36 - Filter Bypass & Exception Handling Vulnerability + PoC Video References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1102 Barracuda Networks Security ID BNSEC: BNSEC-2398...
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
Multiple memory corruptions and buffer overflows...
[SECURITY] [DSA 2973-1] vlc security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2973-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 07, 2014 http://www.debian.org/security/faq -...
ESA-2014-060: EMC Documentum eRoom Multiple Cross-Site Scripting Vulnerabilities
ESA-2014-060.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-060: EMC Documentum eRoom Multiple Cross-Site Scripting Vulnerabilities EMC Identifier: ESA-2014-060 CVE Identifier: CVE-2014-2512 Severity Rating: CVSS v2 Base Score: 8 AV:N/AC:L/Au:S/C:C/I:P/A:P Affected products: • EMC...
Barracuda Networks Spam&Virus Firewall v6.0.2 (600 & Vx) - Client Side Cross Site Vulnerability
Document Title: =============== Barracuda Networks Spam&Virus Firewall v6.0.2 600 & Vx - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=890 Barracuda Networks Security ID BNSEC: BNSEC-1176...
Barracuda Networks #35 Web Firewall 610 v6.0.1 - Filter Bypass & Persistent Vulnerability
Document Title: =============== Barracuda Networks 35 Web Firewall 610 v6.0.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1101 Barracuda Networks Security ID BNSEC: BNSEC-2361...
Barracuda Networks Firewall 6.1.5 - Filter Bypass & Persistent Vulnerabilities
Document Title: =============== Barracuda Networks Firewall 6.1.5 - Filter Bypass & Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1065 Barracuda Networks Security ID BNSEC: BNSEC-2067...
Apache multiple security vulnerabilities
modstatus buffer overflow, modproxy, moddeflate, modcgid DoS...
Nessus Web UI information leakage
Information leakage via Web...
KL-001-2014-003 : Microsoft XP SP3 MQAC.sys Arbitrary Write Privilege Escalation
Title: Microsoft XP SP3 MQAC.sys Arbitrary Write Privilege Escalation Advisory ID: KL-001-2014-003 Publication Date: 2014.07.18 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2014-003.txt 1. Vulnerability Details Affected Vendor: Microsoft Affected Product: MQ Access Contr...
libgd / PHP DoS
NULL pointer dereference on XPM files parsing...
[security bulletin] HPSBST03039 rev.1 - HP StoreVirtual 4000 Storage and StoreVirtual VSA, Remote Disclosure of Information, Elevation of Privilege
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04281279 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04281279 Version: 1 HPSBST03039 rev....
[USN-2293-1] CUPS vulnerability
========================================================================== Ubuntu Security Notice USN-2293-1 July 21, 2014 cups vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...
liblzo integer overflow
Integer overflow on LZO decompression...
KL-001-2014-002 : Microsoft XP SP3 BthPan.sys Arbitrary Write Privilege Escalation
Title: Microsoft XP SP3 BthPan.sys Arbitrary Write Privilege Escalation Advisory ID: KL-001-2014-002 Publication Date: 2014-07-18 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2014-002.txt 1. Vulnerability Details Affected Vendor: Microsoft Affected Product: Bluetooth...
HP StoreVirtual security vulnerabilities
Information leakage, privilege escalation...
[ MDVSA-2014:133 ] gd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:133 http://www.mandriva.com/en/support/security/ Package : gd Date : July 10, 2014 Affected: Business Server 1.0 Problem Description: Updated gd and libgd packages fix security vulnerability: The...