47153 matches found
FileMaster SY-IT v3.1 iOS - Multiple Web Vulnerabilities
Document Title: =============== FileMaster SY-IT v3.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1170 Release Date: ============= 2013-12-16 Vulnerability Laboratory ID VL-ID: ====================================...
[CVE-2013-6986] Insecure Data Storage in Subway Ordering for California (ZippyYum) 3.4 iOS mobile application
Title: CVE-2013-6986 Insecure Data Storage in Subway Ordering for California ZippyYum 3.4 iOS mobile application Published: December 7, 2013 Reported to Vendor: May 2013 CVE Reference: CVE-2013-6986 https://vulners.com/cve/CVE-2013-6986 CVSS v2 Base Score: 4.9 CVSS v2 Vector...
[SECURITY] [DSA 2817-1] libtar security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2817-1 [email protected] http://www.debian.org/security/ Luciano Bello December 14, 2013 http://www.debian.org/security/faq -...
Advisory 01/2013: PHP openssl_x509_parse() Memory Corruption Vulnerability
SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: PHP opensslx509parse Memory Corruption Vulnerability Release Date: 2013/12/13 Last Modified: 2013/12/13 Author: Stefan Esser stefan.esseratsektioneins.de Application: PHP 4.0.6 - PHP 4.4.9 PHP 5.0.x PHP 5.1.x PHP 5.2.x PHP 5.3....
Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities
Document Title: =============== Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1166 Release Date: ============= 2013-12-10 Vulnerability Laboratory ID VL-ID:...
Song Exporter v2.1.1 RS iOS - File Include Vulnerabilities
Title: CVE-2013-6986 Insecure Data Storage in Subway Ordering for California ZippyYum 3.4 iOS mobile application Published: December 7, 2013 Reported to Vendor: May 2013 CVE Reference: CVE-2013-6986 https://vulners.com/cve/CVE-2013-6986 CVSS v2 Base Score: 4.9 CVSS v2 Vector...
iOS applications multiple seucrity vulnereabilities
Multiple application with remote data access are vulnerable...
Microsoft Windows multiple security vulnerabilities
Memory corruption in graphics library, signature check bypass, use-after-free in scripting, multiple privilege escalations...
PHP memory corruption
Memory corruption in asn1timetotimet...
CORE-2013-0807 - Divide Error in Windows Kernel
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Divide Error in Windows Kernel 1. Advisory Information Title: Divide Error in Windows Kernel Advisory ID: CORE-2013-0807 Advisory URL: http://www.coresecurity.com/advisories/divide-error-in-windows-kernel Date published: 2013-12-...
denyhosts DoS
Invalid regular expression can be exploited to ban arbitrary IP address...
[slackware-security] llvm (SSA:2013-350-03)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security llvm SSA:2013-350-03 New llvm packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...
[slackware-security] libiodbc (SSA:2013-350-01)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security libiodbc SSA:2013-350-01 New libiodbc packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...
Asterisk security vulnerabilities
SMS parsing buffer overflow, Asterisk Manager privilege escalation...
APPLE-SA-2013-12-16-1 Safari 6.1.1 and Safari 7.0.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-12-16-1 Safari 6.1.1 and Safari 7.0.1 Safari 6.1.1 and Safari 7.0.1 are now available and address the following: Safari Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9 Impact:...
Apple Motion buffer overflow
Buffer overflow on .motn files parsing...
QT resources exhaustion
Resources exhaustion leads to denial of service...
Apple Safari multiple security vulnerabilities
Information leakage, multiple memory corruptions...
libiodbc rpath vulnerability
Unsafe rpath vulnerability in test applications...
RealPlayer buffer overflow
Buffer overflow on RMP files parsing...
APPLE-SA-2013-12-16-2 OS X Mavericks v10.9.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-12-16-2 OS X Mavericks v10.9.1 OS X Mavericks v10.9.1 is now available and includes the content of Safari 7.0.1. For further details see "About the security content of Safari 6.1.1 and Safari 7.0.1" at http://support.apple.com/kb/HT6082 ...
CORE-2013-0903 - RealPlayer Heap-based Buffer Overflow Vulnerability
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ RealPlayer Heap-based Buffer Overflow Vulnerability 1. Advisory Information Title: RealPlayer Heap-based Buffer Overflow Vulnerability Advisory ID: CORE-2013-0903 Advisory URL:...
[ MDVSA-2013:298 ] php
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:298 http://www.mandriva.com/en/support/security/ Package : php Date : December 20, 2013 Affected: Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and corrected in php: The...
[SECURITY] [DSA 2825-1] wireshark security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2825-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 20, 2013 http://www.debian.org/security/faq -...
Wireshark DoS
Problems with NTLMSSPv2 and BSSGP dissectors...
VMWare ESX / ESXi privilege escalation
Files access privilege escalation...
[USN-2057-1] Qt vulnerability
========================================================================== Ubuntu Security Notice USN-2057-1 December 17, 2013 qt4-x11, qtbase-opensource-src vulnerability ========================================================================== A security issue affects these releases of Ubuntu...
llvm unsafe rpath
rpath is set to /tmp...
AST-2013-007: Asterisk Manager User Dialplan Permission Escalation
Asterisk Project Security Advisory - AST-2013-007 Product Asterisk Summary Asterisk Manager User Dialplan Permission Escalation Nature of Advisory Permission Escalation Susceptibility Remote Authenticated Sessions Severity Minor Exploits Known None Reported On November 25, 2013 Reported By Matt...
AST-2013-006: Buffer Overflow when receiving odd length 16 bit SMS message
Asterisk Project Security Advisory - AST-2013-006 Product Asterisk Summary Buffer Overflow when receiving odd length 16 bit SMS message Nature of Advisory Buffer Overflow and Remote Crash Susceptibility Remote SMS Messages Severity Major Exploits Known None Reported On September 26, 2013 Reported...
NEW VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2013-0016 Synopsis: VMware ESXi and ESX unauthorized file access through vCenter Server and ESX Issue date: 2013-12-22 Updated on:...
APPLE-SA-2013-12-19-1 Motion 5.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-12-19-1 Motion 5.1 Motion 5.1 is now available and addresses the following: Motion Available for: OS X Mavericks v10.9 or later Impact: A maliciously crafted .motn file could lead to arbitrary code execution Description: An integer...
[SECURITY] [DSA 2826-1] denyhosts security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2826-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 22, 2013 http://www.debian.org/security/faq -...
cURL certificates spoofing
Имя хоста не проверяется при включенном CURLOPTSSLVERIFYPEER...
[USN-2058-1] curl vulnerability
========================================================================== Ubuntu Security Notice USN-2058-1 December 18, 2013 curl vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
ANSSI certificate is used for spoofing
ANSSI agency uses valid intermediate certificate in traffic sniffing device...
[USN-2061-1] OpenStack Keystone vulnerability
========================================================================== Ubuntu Security Notice USN-2061-1 December 19, 2013 keystone vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
OpenStack multiple security vulnerabilities
DoS, information leakage...
[SECURITY] [DSA 2822-1] xorg-server security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2822-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 18, 2013 http://www.debian.org/security/faq -...
X.Org integer overflow
Integer overflow...
[ MDVSA-2013:291 ] kernel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:291 http://www.mandriva.com/en/support/security/ Package : kernel Date : December 17, 2013 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been found and corrected in the Linu...
Linux kernel multiple security vulnerabilities
Weak permissions, information leakage, privilege escalation, DoS...
[USN-2062-1] OpenStack Horizon vulnerability
========================================================================== Ubuntu Security Notice USN-2062-1 December 20, 2013 horizon vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
GnuPG acoustic attack
It's possible to resover sensitive information via acousitc emanations...
[USN-2059-1] GnuPG vulnerability
========================================================================== Ubuntu Security Notice USN-2059-1 December 18, 2013 gnupg vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
Multiple memory corruptions, XSS, information leakage, certificate check bypass...
Microsoft Exchange Server multiple security vulnerabilities
Machine authentication check code execution, crossite scripting, Oracle components code execution...
Microsoft Internet Explorer multiple security vulnerabilities
Multiple memory corruption and privilege escalations...
Microsoft SignalR library crossite scripting
Forever Frame transport crossite scripting...
Microsoft SharePoint code execution
It's possible to executed code via SharePoint page content...