47153 matches found
HP-UX m4 privilege escalation
No description provided...
Microsoft Internet Explorer multiple security vulnerabilities
Multiple memory corruptions, crossite access, privilege escalation...
HP Unified Functional Testing code execution
No description provided...
HP Rapid Deployment Pack / HP Insight Control Server Deployment multiple security vulnerabilities
Multiple different vulnerabilities...
VUPEN Security Research - Mozilla Firefox "BumpChunk" Object Processing Use-after-free (Pwn2Own)
VUPEN Security Research - Mozilla Firefox "BumpChunk" Object Processing Use-after-free Pwn2Own Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Mozilla Firefox is a free and open-source web browser developed for Windows, OS X, and Linux, with ...
ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability
ESA-2014-015.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability EMC Identifier: ESA-2014-015 CVE Identifier: CVE-2014-0623 Severity Rating: CVSS v2 Base Score: 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N Affected Products: RSA...
HP Smart Update Manager privilege escalation
No description provided...
HP StoreOnce unauthorized access
No description provided...
HP SiteScope security vulnerabilities
Code execution, information leakage, DoS on SOAP requests...
EMC RSA BSAFE Micro Edition DoS
Server crash on certificate check...
ESA-2014-011: RSA BSAFE® Micro Edition Suite Server Crash Vulnerability
ESA-2014-011.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-011: RSA BSAFE® Micro Edition Suite Server Crash Vulnerability EMC Identifier: ESA-2014-011 CVE Identifier: CVE-2014-0628 Severity Rating: CVSS v2 Base Score: 5.4 AV:N/AC:H/Au:N/C:N/I:N/A:C Affected Products: RSA BSAFE Micro...
[USN-2155-1] OpenSSH vulnerability
========================================================================== Ubuntu Security Notice USN-2155-1 March 25, 2014 openssh vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
[security bulletin] HPSBMU02967 rev.2 - HP Unified Functional Testing Running on Windows, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iNote: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04122007 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04122007 Version: 2 HPSBMU02967 rev...
Synology DiskStation Manager code execution
Code execution via web interface...
HP System Management Homepage security vulnerabilities
Crossite scripting, information leakage...
[security bulletin] HPSBGN02970 rev.1 - HP Rapid Deployment Pack (RDP) or HP Insight Control Server Deployment, Multiple Remote Vulnerabilities affecting Confidentiality, Integrity and Availability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04135307 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04135307 Version: 1 HPSBGN02970 rev....
Mozilla Firefox / Thunderbird / Seamonkey / nss multiple security vulnerabilities
Buffer overflows, memory corruptions, information leakage, privilege escalation, protection bypass, unauthorized access, interface spoofing...
[SECURITY] [DSA 2884-1] libyaml security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2884-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 26, 2014 http://www.debian.org/security/faq -...
[USN-2153-1] initramfs-tools vulnerability
========================================================================== Ubuntu Security Notice USN-2153-1 March 24, 2014 initramfs-tools vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivative...
initramfs-tools weak permissions
/run is mounted withour noexec option...
Microsoft Office memory corruption
Microsoft Word RTF parsing 0-day vulnerability is exploited in-the-wild...
[SECURITY] [DSA 2883-1] chromium-browser security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2883-1 [email protected] http://www.debian.org/security/ Michael Gilbert March 23, 2014 http://www.debian.org/security/faq -...
lighttpd security vulnerabilities
SQL injection, directory traversal...
NCC00643 Technical Advisory: Nessus Authenticated Scan Local Privilege Escalation
...................................... Vulnerability Summary ...................................... Title Nessus Authenticated Scan - Local Privilege Escalation Release Date 20 March 2014 Reference NGS00643 Discoverer Neil Jones Vendor Tenable Vendor Reference RWZ-21387-181 Systems Affected Nessu...
[ MDVSA-2014:065 ] apache
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:065 http://www.mandriva.com/en/support/security/ Package : apache Date : March 20, 2014 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been found and...
[ MDVSA-2014:052 ] net-snmp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:052 http://www.mandriva.com/en/support/security/ Package : net-snmp Date : March 13, 2014 Affected: Business Server 1.0 Problem Description: Updated net-snmp packages fix two vulnerabilities: Remotely...
EMC Connectrix Manager information leakage
Files access is possible...
[ MDVSA-2014:066 ] nss
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:066 http://www.mandriva.com/en/support/security/ Package : nss Date : March 20, 2014 Affected: Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in mozilla NSS: In a...
[SECURITY] [DSA 2877-1] lighttpd security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2877-1 [email protected] http://www.debian.org/security/ Michael Gilbert March 12, 2014 http://www.debian.org/security/faq -...
OpenXchange crossite scripting
Crossite scripting on MS Office and EML documents viewing...
Open-Xchange Security Advisory 2014-03-17
Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 31065 Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 7.4.1 and 7.4.2 Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.4.1-rev10, 7.4.2-rev...
Apache security vulnerabilities
modlogconfig DoS, moddav buffer overflow...
ESA-2014-018: EMC Connectrix Manager Converged Network Edition Information Disclosure Vulnerability
ESA-2014-018.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-018: EMC Connectrix Manager Converged Network Edition Information Disclosure Vulnerability EMC Identifier: ESA-2014-018 CVE Identifier: CVE-2014-2276 Severity Rating: CVSS v2 Base Score: CVSS: 5 AV:N/AC:L/Au:N/C:P/I:N/A:N...
Open-Xchange Security Advisory 2014-02-10
Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 30820 Bug ID Vulnerability type: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page Vulnerable version: 7.4.1 and earlier Vulnerable component: backend Fixed version: 7.2.2-rev31, 7.4.0-rev27,...
Net-SNMP DoS
Few DoS conditions...
Cisco Wireless LAN Controller multiple security vulnerabilities
Memory corruption, race conditions, DoS...
Cisco SMB routers authemtication bypass
It's possible to bypass authentication for web administration interface...
Cisco Firewall Services Module DoS
Race conditions in cut-through proxy function...
[CVE-2014-0683]Router Cisco RV110W - RV215W - CVR100W - Bypass Login Page - Admin Password Disclosure
Title: ====== Router CISCO RV110W - RV215W - CVR100W - Bypass Login Page Date: ===== 05/03/2014 CVE Number: ============ CVE-2014-0683 Cisco Security Advisory: =========== http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-rpd Status: ======== Reported to Cisco...
Cisco Unified SIP Phone 3905 unauthorized access
Undocumented TCP/7870 service...
Cisco AsyncOS code execution
Code execution on mail check...
Cisco Intrusion Prevention System multiple security vulnerabilities
Few different DoS conditions...
Cisco UCS Director default credentials
default root account is accessible via ssh...
PHP multiple security vulnerabilities
DoS, information leakage, code execution...
Microsoft Internet Explorer multiple security vulnerabilities
Multiple memory corruptions...
[ MDVSA-2014:061 ] oath-toolkit
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:061 http://www.mandriva.com/en/support/security/ Package : oath-toolkit Date : March 14, 2014 Affected: Business Server 1.0 Problem Description: Updated oath-toolkit packages fix security vulnerability: It w...
Remote Root via HP-UX rlpdaemon
Invalid printing commands parsing allows code executions...
[slackware-security] samba (SSA:2014-072-01)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security samba SSA:2014-072-01 New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...
imapsync information leakage
Few information leaks...
[ MDVSA-2014:063 ] x2goserver
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:063 http://www.mandriva.com/en/support/security/ Package : x2goserver Date : March 17, 2014 Affected: Business Server 1.0 Problem Description: Updated x2goserver package fixes security vulnerability: A...