47153 matches found
ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability
ESA-2014-015.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability EMC Identifier: ESA-2014-015 CVE Identifier: CVE-2014-0623 Severity Rating: CVSS v2 Base Score: 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N Affected Products: RSA...
HP Smart Update Manager privilege escalation
No description provided...
[security bulletin] HPSBMU02975 rev.1 - HP Smart Update Manager for Linux, Elevation of Privileges
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 UPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04000397 Version: 1 HPSBMU02975 rev.1 - HP Smart Update Manager for Linux, Elevation of Privileges NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Relea...
[SECURITY] [DSA 2886-1] libxalan2-java security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2886-1 [email protected] http://www.debian.org/security/ Florian Weimer March 26, 2014 http://www.debian.org/security/faq -...
[security bulletin] HPSBMU02948 rev.1 - HP Systems Insight Manager (SIM) Running on Linux and Windows, Remote Execution of Arbitrary Code, Denial of Service (DoS), Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04039150 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04039150 Version: 1 HPSBMU02948 rev....
HP Systems Insight Manager multiple security vulnerabilities
DoS, code execution...
HP Rapid Deployment Pack / HP Insight Control Server Deployment multiple security vulnerabilities
Multiple different vulnerabilities...
HP StoreOnce unauthorized access
No description provided...
[SECURITY] [DSA 2884-1] libyaml security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2884-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 26, 2014 http://www.debian.org/security/faq -...
[USN-2155-1] OpenSSH vulnerability
========================================================================== Ubuntu Security Notice USN-2155-1 March 25, 2014 openssh vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
HP System Management Homepage security vulnerabilities
Crossite scripting, information leakage...
[security bulletin] HPSBMU02967 rev.2 - HP Unified Functional Testing Running on Windows, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iNote: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04122007 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04122007 Version: 2 HPSBMU02967 rev...
HP SiteScope security vulnerabilities
Code execution, information leakage, DoS on SOAP requests...
Synology DiskStation Manager code execution
Code execution via web interface...
EMC RSA BSAFE Micro Edition DoS
Server crash on certificate check...
Mozilla Firefox / Thunderbird / Seamonkey / nss multiple security vulnerabilities
Buffer overflows, memory corruptions, information leakage, privilege escalation, protection bypass, unauthorized access, interface spoofing...
[security bulletin] HPSBGN02970 rev.1 - HP Rapid Deployment Pack (RDP) or HP Insight Control Server Deployment, Multiple Remote Vulnerabilities affecting Confidentiality, Integrity and Availability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04135307 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04135307 Version: 1 HPSBGN02970 rev....
ESA-2014-011: RSA BSAFE® Micro Edition Suite Server Crash Vulnerability
ESA-2014-011.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-011: RSA BSAFE® Micro Edition Suite Server Crash Vulnerability EMC Identifier: ESA-2014-011 CVE Identifier: CVE-2014-0628 Severity Rating: CVSS v2 Base Score: 5.4 AV:N/AC:H/Au:N/C:N/I:N/A:C Affected Products: RSA BSAFE Micro...
Microsoft Office memory corruption
Microsoft Word RTF parsing 0-day vulnerability is exploited in-the-wild...
initramfs-tools weak permissions
/run is mounted withour noexec option...
[USN-2153-1] initramfs-tools vulnerability
========================================================================== Ubuntu Security Notice USN-2153-1 March 24, 2014 initramfs-tools vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivative...
[SECURITY] [DSA 2883-1] chromium-browser security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2883-1 [email protected] http://www.debian.org/security/ Michael Gilbert March 23, 2014 http://www.debian.org/security/faq -...
lighttpd security vulnerabilities
SQL injection, directory traversal...
EMC Connectrix Manager information leakage
Files access is possible...
NCC00643 Technical Advisory: Nessus Authenticated Scan Local Privilege Escalation
...................................... Vulnerability Summary ...................................... Title Nessus Authenticated Scan - Local Privilege Escalation Release Date 20 March 2014 Reference NGS00643 Discoverer Neil Jones Vendor Tenable Vendor Reference RWZ-21387-181 Systems Affected Nessu...
[ MDVSA-2014:052 ] net-snmp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:052 http://www.mandriva.com/en/support/security/ Package : net-snmp Date : March 13, 2014 Affected: Business Server 1.0 Problem Description: Updated net-snmp packages fix two vulnerabilities: Remotely...
[ MDVSA-2014:065 ] apache
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:065 http://www.mandriva.com/en/support/security/ Package : apache Date : March 20, 2014 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been found and...
[ MDVSA-2014:066 ] nss
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:066 http://www.mandriva.com/en/support/security/ Package : nss Date : March 20, 2014 Affected: Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in mozilla NSS: In a...
[SECURITY] [DSA 2877-1] lighttpd security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2877-1 [email protected] http://www.debian.org/security/ Michael Gilbert March 12, 2014 http://www.debian.org/security/faq -...
OpenXchange crossite scripting
Crossite scripting on MS Office and EML documents viewing...
Net-SNMP DoS
Few DoS conditions...
ESA-2014-018: EMC Connectrix Manager Converged Network Edition Information Disclosure Vulnerability
ESA-2014-018.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-018: EMC Connectrix Manager Converged Network Edition Information Disclosure Vulnerability EMC Identifier: ESA-2014-018 CVE Identifier: CVE-2014-2276 Severity Rating: CVSS v2 Base Score: CVSS: 5 AV:N/AC:L/Au:N/C:P/I:N/A:N...
Apache security vulnerabilities
modlogconfig DoS, moddav buffer overflow...
Open-Xchange Security Advisory 2014-02-10
Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 30820 Bug ID Vulnerability type: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page Vulnerable version: 7.4.1 and earlier Vulnerable component: backend Fixed version: 7.2.2-rev31, 7.4.0-rev27,...
Open-Xchange Security Advisory 2014-03-17
Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 31065 Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 7.4.1 and 7.4.2 Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.4.1-rev10, 7.4.2-rev...
Cisco Wireless LAN Controller multiple security vulnerabilities
Memory corruption, race conditions, DoS...
Cisco SMB routers authemtication bypass
It's possible to bypass authentication for web administration interface...
[CVE-2014-0683]Router Cisco RV110W - RV215W - CVR100W - Bypass Login Page - Admin Password Disclosure
Title: ====== Router CISCO RV110W - RV215W - CVR100W - Bypass Login Page Date: ===== 05/03/2014 CVE Number: ============ CVE-2014-0683 Cisco Security Advisory: =========== http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-rpd Status: ======== Reported to Cisco...
Cisco Firewall Services Module DoS
Race conditions in cut-through proxy function...
Cisco AsyncOS code execution
Code execution on mail check...
Cisco UCS Director default credentials
default root account is accessible via ssh...
Cisco Unified SIP Phone 3905 unauthorized access
Undocumented TCP/7870 service...
Cisco Intrusion Prevention System multiple security vulnerabilities
Few different DoS conditions...
PHP multiple security vulnerabilities
DoS, information leakage, code execution...
Microsoft Internet Explorer multiple security vulnerabilities
Multiple memory corruptions...
Remote Root via HP-UX rlpdaemon
Invalid printing commands parsing allows code executions...
[ MDVSA-2014:061 ] oath-toolkit
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:061 http://www.mandriva.com/en/support/security/ Package : oath-toolkit Date : March 14, 2014 Affected: Business Server 1.0 Problem Description: Updated oath-toolkit packages fix security vulnerability: It w...
x2goserver privilege escalation
Relative path is used to execute application...