47153 matches found
CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities 1. Advisory Information Title: Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities Advisory ID: CORE-2014-0002 Advisory URL:...
[SECURITY] CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS Severity: Important Vendor: The Apache Software Foundation Versions Affected: - - Commons FileUpload 1.0 to 1.3 - - Apache Tomcat 8.0.0-RC1 to 8.0.1 - - Apache Tomcat 7.0.0 to 7.0.50 - -...
ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities
Document Title: =============== ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1230 Release Date: ============= 2014-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 1230...
ES746 DELL Support-Bulletin - EMS Vulnerability Resolved
Document Title: =============== ES746 DELL Support-Bulletin - EMS Vulnerability Resolved References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1241 Download:...
Symantec LiveUpdate Administrator security vulnerabilities
Unaurhorized access, SQL injection...
Imagemagic security vulnerabilities
Memory corruptions on JPEG and PSD parsing...
My Photo Wifi Share & PS 1.1 iOS - Local Command Injection Vulnerability
Document Title: =============== My Photo Wifi Share & PS 1.1 iOS - Local Command Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1232 Release Date: ============= 2014-03-24 Vulnerability Laboratory ID VL-ID:...
Apple iOS multiple security vulnerabilities
Symbolic links vulnerability, root certificates problems, protection bypass, DoS, privilege escalation, memory corruption, information leakage, code execution...
Android protection bypass
It's possible to install and run application silently...
Huawei E5331 Multiple security vulnerabilities
Unauthorized access, CSRF...
Dell SonicWALL security vulnerabilities
Filtering bypass, XSS...
Lazybone Studios WiFi Music 1.0 iOS - Multiple Vulnerabilities
Document Title: =============== Lazybone Studios WiFi Music 1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1233 Release Date: ============= 2014-03-21 Vulnerability Laboratory ID VL-ID:...
My PDF Creator & DE DM v1.4 iOS - Multiple Vulnerabilities
Document Title: =============== My PDF Creator & DE DM v1.4 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1201 Release Date: ============= 2014-02-16 Vulnerability Laboratory ID VL-ID: ====================================...
[USN-2131-1] IcedTea Web vulnerability
========================================================================== Ubuntu Security Notice USN-2131-1 March 06, 2014 icedtea-web vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
libYAML buffer overflow
Buffer oveflow on oversized tag...
WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities
Document Title: =============== WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1192 Release Date: ============= 2014-02-08 Vulnerability Laboratory ID VL-ID: ====================================...
SEC Consult SA-20140328-0 :: Multiple vulnerabilities in Symantec LiveUpdate Administrator
SEC Consult Vulnerability Lab Security Advisory 20140328-0 ======================================================================= title: Multiple critical vulnerabilities product: Symantec LiveUpdate Administrator vulnerable version: = 2.3.2.99 fixed version: 2.3.2.110 impact: critical CVE numbe...
EMC VPLEX multiple security vulnerabilities
Directory traversal, protection bypass...
PowerArchiver weak encrption
Native ZIP encryption is used instead of AES...
[oCERT-2014-003] LibYAML input sanitization errors
2014-003 LibYAML input sanitization errors Description: The LibYAML project is an open source YAML 1.1 parser and emitter written in C. The library is affected by a heap-based buffer overflow which can lead to arbitrary code execution. The vulnerability is caused by lack of proper expansion for t...
[USN-2140-1] Linux kernel vulnerabilities
========================================================================== Ubuntu Security Notice USN-2140-1 March 07, 2014 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
PowerArchiver: Uses insecure legacy PKZIP encryption when AES is selected (CVE-2014-2319)
PowerArchiver: Uses insecure legacy PKZIP encryption when AES is selected CVE-2014-2319 References https://vulners.com/cve/CVE-2014-2319 http://int21.de/cve/CVE-2014-2319-powerarchiver.html http://www.powerarchiver.com/2014/03/12/powerarchiver-2013-14-02-05-released/ Background...
SonicWall Dashboard Backend Server - Client Side Cross Site Scripting Web Vulnerability
Document Title: =============== SonicWall Dashboard Backend Server - Client-Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1100 Release Date: ============= 2014-03-06 Vulnerability Laboratory ID VL-ID:...
jDisk (stickto) v2.0.3 iOS - Multiple Web Vulnerabilities
Document Title: =============== jDisk stickto v2.0.3 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1196 Release Date: ============= 2014-02-12 Vulnerability Laboratory ID VL-ID: ==================================== 11...
[USN-2132-1] ImageMagick vulnerabilities
========================================================================== Ubuntu Security Notice USN-2132-1 March 06, 2014 imagemagick vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives:...
ESA-2014-016: EMC VPLEX Multiple Vulnerabilities
ESA-2014-016.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-016: EMC VPLEX Multiple Vulnerabilities EMC Identifier: ESA-2014-016 CVE Identifier: See below for individual CVEs Severity Rating: CVSS v2 Base Score: See below for individual CVSS scores Affected products: All versions from...
VUPEN Security Research - Google Chrome "Clipboard::WriteData()" Function Sandbox Escape (Pwn2Own)
VUPEN Security Research - Google Chrome Clipboard Format Processing Sandbox Escape Pwn2Own Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Google Chrome is a freeware web browser developed by Google. Chrome version 28 and beyond uses the WebK...
VUPEN Security Research - Mozilla Firefox "BumpChunk" Object Processing Use-after-free (Pwn2Own)
VUPEN Security Research - Mozilla Firefox "BumpChunk" Object Processing Use-after-free Pwn2Own Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Mozilla Firefox is a free and open-source web browser developed for Windows, OS X, and Linux, with ...
ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability
ESA-2014-015.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability EMC Identifier: ESA-2014-015 CVE Identifier: CVE-2014-0623 Severity Rating: CVSS v2 Base Score: 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N Affected Products: RSA...
HP-UX rpc.lockd DoS
No description provided...
Chromium / Google Chrome multiple security vulnerabilities
Memory corruprions, information leakage, certificate validation issues, protection bypass, crossite scripting, directory traversal...
Cisco IOS multiple security vulnerabilities
Multiple DoS conditions...
ESA-2014-011: RSA BSAFE® Micro Edition Suite Server Crash Vulnerability
ESA-2014-011.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-011: RSA BSAFE® Micro Edition Suite Server Crash Vulnerability EMC Identifier: ESA-2014-011 CVE Identifier: CVE-2014-0628 Severity Rating: CVSS v2 Base Score: 5.4 AV:N/AC:H/Au:N/C:N/I:N/A:C Affected Products: RSA BSAFE Micro...
Microsoft Internet Explorer multiple security vulnerabilities
Multiple memory corruptions, crossite access, privilege escalation...
HP Rapid Deployment Pack / HP Insight Control Server Deployment multiple security vulnerabilities
Multiple different vulnerabilities...
HP Unified Functional Testing code execution
No description provided...
VUPEN Security Research - Google Chrome Blink "locationAttributeSetter" Use-after-free (Pwn2Own)
VUPEN Security Research - Google Chrome Blink "locationAttributeSetter" Use-after-free Pwn2Own Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Google Chrome is a freeware web browser developed by Google. Chrome version 28 and beyond uses the...
[USN-2155-1] OpenSSH vulnerability
========================================================================== Ubuntu Security Notice USN-2155-1 March 25, 2014 openssh vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
[SECURITY] [DSA 2885-1] libyaml-libyaml-perl security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2885-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 26, 2014 http://www.debian.org/security/faq -...
[security bulletin] HPSBGN02970 rev.1 - HP Rapid Deployment Pack (RDP) or HP Insight Control Server Deployment, Multiple Remote Vulnerabilities affecting Confidentiality, Integrity and Availability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04135307 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04135307 Version: 1 HPSBGN02970 rev....
HP-UX m4 privilege escalation
No description provided...
[security bulletin] HPSBHF02965 rev.1 - HP Security Management System, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04156626 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04156626 Version: 1 HPSBHF02965 rev....
[security bulletin] HPSBMU02933 rev.2 - HP SiteScope, issueSiebelCmd and loadFileContents SOAP Requests, Remote Code Execution, Arbitrary File download, Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03969435 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03969435 Version: 2 HPSBMU02933 rev....
HP SiteScope security vulnerabilities
Code execution, information leakage, DoS on SOAP requests...
HP Security Management System code execution
No description provided...
HP Systems Insight Manager multiple security vulnerabilities
DoS, code execution...
[security bulletin] HPSBMU02947 rev.1 - HP System Management Homepage (SMH) Running on Linux and Windows, Remote Disclosure of Information and Cross-Site Request Forgery (CSRF)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04039138 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04039138 Version: 1 HPSBMU02947 rev....
[security bulletin] HPSBMU02975 rev.1 - HP Smart Update Manager for Linux, Elevation of Privileges
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 UPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04000397 Version: 1 HPSBMU02975 rev.1 - HP Smart Update Manager for Linux, Elevation of Privileges NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Relea...
[SECURITY] [DSA 2886-1] libxalan2-java security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2886-1 [email protected] http://www.debian.org/security/ Florian Weimer March 26, 2014 http://www.debian.org/security/faq -...
libxalan security vulnerabilities
Information leak, code execution...