47153 matches found
[security bulletin] HPSBMU03413 rev.1 - HP Virtual Connect Enterprise Manager SDK, Multiple Vulnerabilities
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04774021 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04774021 Version: 1 HPSBMU03413 rev.1 - HP Virtual Connect Enterprise Manager SDK...
[SECURITY] [DSA 3355-1] libvdpau security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3355-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini September 10, 2015 https://www.debian.org/security/faq -...
SAP NetWeaver hardcoded credentials
No description provided...
[SECURITY] [DSA 3352-1] screen security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3352-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS September 04, 2015 https://www.debian.org/security/faq -...
[security bulletin] HPSBMU03339 rev.1 - HP LoadRunner Controller, Local Execution of Arbitrary Code
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04692147 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04692147 Version: 1 HPSBMU03339 rev.1 - HP LoadRunner Controller, Local Execution...
FreeType uninitilized memory access
Uninitialized memory access on fonts parsing...
HP Version Control Repository Manager multiple security vulnerabilities
Information disclosure, DoS, unauthorized access, buffer overflow, privilege escalation, crossite scripting...
HP LoadRunner Controller code execution
No description provided...
libvpau multiple security vulnerabilities
Privilege escalation because of incorrect envorionment variables handling...
Synology Download Station crossite scripting
Few crossite scripging possibilities...
[security bulletin] HPSBHF03408 rev.2 - HP PCs with HP lt4112 LTE/HSPA+ Gobi 4G Module, Remote Execution of Arbitrary Code
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04773272 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04773272 Version: 2 HPSBHF03408 rev.2 - HP PCs with HP lt4112 LTE/HSPA+ Gobi 4G...
NETGEAR Wireless Management System - Authentication Bypass and Privilege Escalation.
NETGEAR Wireless Management System - Authentication Bypass and Privilege Escalation. WMS5316 ProSafe 16AP Wireless Management System - Firmware 2.1.4.15 Build 1236. - Vulnerability Information: ============================== Title: NETGEAR Wireless Management System - Authentication Bypass and...
spice race conditions
Race conditions lead to memory corruption...
[SECURITY] [DSA 3353-1] openslp-dfsg security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3353-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini September 05, 2015 https://www.debian.org/security/faq -...
ESA-2015-144: EMC Documentum Content Server Privilege Escalation Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-144: EMC Documentum Content Server Privilege Escalation Vulnerability EMC Identifier: ESA-2015-144 CVE Identifier: CVE-2015-4544 Severity Rating: CVSS v2 Base Score: 8.2 AV:N/AC:M/Au:S/C:C/I:C/A:P Affected products: • EMC Documentum Content...
[USN-2736-1] Spice vulnerability
========================================================================== Ubuntu Security Notice USN-2736-1 September 08, 2015 spice vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
ESA-2015-110: EMC Documentum Thumbnail Server Directory Traversal Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-110: EMC Documentum Thumbnail Server Directory Traversal Vulnerability EMC Identifier: ESA-2015-110 CVE Identifier: CVE-2015-0550 Severity Rating: CVSS Base Score 8.5 AV:N/AC:L/Au:N/C:C/I:N/A:P Affected Products : EMC Software: EMC Documentum...
[USN-2739-1] FreeType vulnerabilities
========================================================================== Ubuntu Security Notice USN-2739-1 September 10, 2015 freetype vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...
pdns DoS
Crash on DNS packet parsing...
ISC bind named DoS
Crash on DNS SEC validation...
[USN-2728-1] Bind vulnerability
========================================================================== Ubuntu Security Notice USN-2728-1 September 02, 2015 bind9 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
[SECURITY] [DSA 3347-1] pdns security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3347-1 [email protected] https://www.debian.org/security/ Sebastien Delafond September 02, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3344-1] php5 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3344-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 27, 2015 https://www.debian.org/security/faq -...
FreeBSD privilege escalation
Privilege escalation because of imcomplete context switching on exception handling...
[USN-2725-1] cups-filters vulnerability
========================================================================== Ubuntu Security Notice USN-2725-1 August 27, 2015 cups-filters vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives:...
Mozilla Firefox / Thunderbird / Seamonkey / Firefox OS multiple security vulnerabilities
Restrictions bypass, memory corruptions...
[USN-2724-1] QEMU vulnerabilities
========================================================================== Ubuntu Security Notice USN-2724-1 August 27, 2015 qemu, qemu-kvm vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...
libvirt / qemu multiple security vulnerabilities
Multiple memory corruptions...
FreeBSD Security Advisory FreeBSD-SA-15:21.amd64
============================================================================= FreeBSD-SA-15:21.amd64 Security Advisory The FreeBSD Project Topic: Local privilege escalation in IRET handler Category: core Module: sysamd64 Announced: 2015-08-25 Credits: Konstantin Belousov, Andrew Lutomirski Affect...
PHP security vulnerabilities
DoS and buffer overflow on PHAR files processing...
cups-filters limitations bypass
Local printers may be accessible via external interfaces...
Basware Banking/Maksuliikenne security vulnerabilities
No description provided...
Design Infotech CMS - SQL Injection Vulnerability
========================================================== + Title :- Design Infotech CMS - SQL Injection Vulnerability + Date :- 23 - July - 2015 + Vendor Homepage :- http://www.designinfotech.in/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :-...
EMC RSA Archer CSRF
Multiple CSRF vulnerabilities...
[SYSS-2015-029] Insecure Direct Object Reference (CWE-932) in Page2Flip Premium App 2.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-029 Product: Page2Flip Vendor: w!ssenswerft GmbH Affected Versions: Premium App 2.5, probably also in Business App and Basic App, and in lower versions Tested Versions: Premium App 2.5 Vulnerability Type: Insecure Direct Objec...
SYSS-2015-033: Missing Function Level Access Control (CWE-935) in Page2Flip Premium App 2.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-033 Product: Page2Flip Vendor: w!ssenswerft GmbH Affected Versions: Premium App 2.5, probably also in Business App and Basic App, and in lower versions Tested Versions: Premium App 2.5 Vulnerability Type: Missing Function Leve...
UDID+ v2.5 iOS - Mail Command Inject Vulnerability
Document Title: =============== UDID+ v2.5 iOS - Mail Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1542 Release Date: ============= 2015-07-06 Vulnerability Laboratory ID VL-ID: ==================================== 1542...
Dell SonicWall NetExtender privilege escalation
Binary planting vulnerability...
-------------------------------------------------------- Snorby 2.6.2 - Stored Cross-site Scripting Vulnerability -------------------------------------------------------- Vendor ------ https://www.snorby.org/ Version ------- 2.6.2 Descriptio
-------------------------------------------------------- Snorby 2.6.2 - Stored Cross-site Scripting Vulnerability -------------------------------------------------------- Vendor ------ https://www.snorby.org/ Version ------- 2.6.2 Description ----------- Found another Stored Cross-site Scripting...
WiFi Pineapple protection bypass
Predictable CSRF tokens...
Insufficient certificate validation in EMC Secure Remote Services Virtual Edition
------------------------------------------------------------------------ Insufficient certificate validation in EMC Secure Remote Services Virtual Edition ------------------------------------------------------------------------ Han Sahin, November 2014...
Apache ActiveMQ DoS
Undocumented shutdown command...
HP Operations Manager i code execution
No description provided...
[security bulletin] HPSBGN03393 rev.1 - HP Operations Manager i, Remote Code Execution
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04762687 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04762687 Version: 1 HPSBGN03393 rev.1 - HP Operations Manager i, Remote Code...
[SECURITY] [DSA 3335-1] request-tracker4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3335-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 13, 2015 https://www.debian.org/security/faq...
[SYSS-2015-041] XSS in OpenText Secure MFT
Advisory ID: SYSS-2015-041 Product: Secure MFT Vendor: OpenText Affected Versions: 2013 R1, 2014 R1, 2014 R2 Tested Versions: 2014 R2 SP4 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Medium Solution Status: Fixed Vendor Notification: 2015-08-05 Solution Date: 2015-08-14 Public...
[security bulletin] HPSBGN03386 rev.1 - HP Central View Fraud Risk Management, Revenue Leakage Control, Dealer Performance Audit, Credit Risk Control, Roaming Fraud Control, Subscription Fraud Prevention, Remote Disclosure of Information, Local Discl
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04751893 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04751893 Version: 1 HPSBGN03386 rev.1 - HP Central View Fraud Risk Management,...
[USN-2704-1] Swift vulnerabilities
========================================================================== Ubuntu Security Notice USN-2704-1 August 06, 2015 swift vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
ESA-2015-132: EMC Documentum D2 Fail Open Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-132: EMC Documentum D2 Fail Open Vulnerability EMC Identifier: ESA-2015-132 CVE Identifier: CVE-2015-4537 Severity Rating: CVSS v2 Base Score: 8.5 AV:N/AC:M/Au:S/C:C/I:C/A:C Affected products: • EMC Documentum D2 4.2 and earlier Summary: EMC...
CVE-2015-5699 - Cumulus Linux's Switch Configuration Tools Backend, clcmd_server, Vulnerable to Local Privilege Escalation
Title =================== Cumulus Linux's Switch Configuration Tools Backend, clcmdserver, Vulnerable to Local Privilege Escalation Summary =================== Cumulus Linux's Switch Configuration Tools Backend, clcmdserver, is vulnerable to local privilege escalation via Command Injection. Cumul...