47153 matches found
libav memory corruptions
Memory corruptions on media formats parsing...
[SECURITY] [DSA 2796-1] torque security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq -...
ESA-2013-070: EMC Documentum Cross Site Scripting Vulnerability.
ESA-2013-070.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-070: EMC Documentum Cross Site Scripting Vulnerability. EMC Identifier: ESA-2013-070 CVE Identifier: CVE-2013-3281 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected products: • EMC Documentum Webtop...
Juniper JunOS crossite scripting
Crossite scripting in EmbedThis...
[SECURITY] [DSA 2795-1] lighttpd security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2795-1 [email protected] http://www.debian.org/security/ Michael Gilbert November 13, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2793-1] libav security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2793-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 09, 2013 http://www.debian.org/security/faq -...
Open-Xchange multiple security vulnerabilities
Multiple different vulnerabilities...
Apple MacOSX 10.9 Hard Link Memory Corruption
Apple MacOSX 10.9 Hard Link Memory Corruption Date: 08.11.2013 http://cxsecurity.com/ http://cvemap.org/ URL: http://cxsecurity.com/issue/WLB-2013110059 - 0. Description --- In most UNIX-like systems a hard link to a directory is only reserved for the 'root' user when possible at all. In MacOSX...
Apple iOS authentication bypass
It's possible to complete AppStore transaction without entering password...
APPLE-SA-2013-11-14-1 iOS 7.0.4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-11-14-1 iOS 7.0.4 iOS 7.0.4 is now available and addresses the following: App Store Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: App and In-App purchases may be completed with...
HP Integrated Lights-Out security vulnerabilities
Crossite scripting, information leakage...
[USN-2025-1] Libav vulnerabilities
========================================================================== Ubuntu Security Notice USN-2025-1 November 11, 2013 libav vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Superuser unsanitized environment vulnerability on Android <= 4.2.x
Vulnerable releases of several common Android Superuser packages may allow malicious Android applications to execute arbitrary commands as root without notifying the device owner: - ChainsDD Superuser current releases, including v3.1.3 - CyanogenMod/ClockWorkMod/Koush Superuser current releases,...
Open-Xchange Security Advisory 2013-11-06
Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 29147 Bug ID Vulnerability type: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page Vulnerable version: prior to 7.4.0 Vulnerable component: backend Fixed version: 7.2.2-rev25, 7.4.0-rev14 Report...
[USN-2012-1] Light Display Manager vulnerability
========================================================================== Ubuntu Security Notice USN-2012-1 November 06, 2013 lightdm vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Dahua DVR Authentication Bypass - CVE-2013-6117
Dahua DVR Authentication Bypass - CVE-2013-6117 --Summary-- Dahua web-enabled DVRs and rebranded versions do not enforce authentication on their administrative services. Zhejiang Dahua Technology Co., Ltd. http://www.dahuasecurity.com --Affects-- Dahua web-enabled DVRs Dahua-rebranded web-enabled...
Cisco WAAS directory traversal
Directory traversal on file upload...
wireshark multiple security vulnerabilities
Vulnerabilities in different protocols dissectors...
MAAS privileg escalation
maas-import-pxe-files privilege escalations...
ESA-2013-073: EMC Documentum eRoom Multiple Cross Site Scripting Vulnerabilities.
ESA-2013-073.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-073: EMC Documentum eRoom Multiple Cross Site Scripting Vulnerabilities. EMC Identifier: ESA-2013-073 CVE Identifier: CVE-2013-3286 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected product: • EMC...
[USN-2027-1] SPICE vulnerability
========================================================================== Ubuntu Security Notice USN-2027-1 November 12, 2013 spice vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
EMC Documentum crossite scripting
Crossite scripting in different modules...
Cisco TelePresence VX Clinical Assistant unauthorized access
admin password is reset on every reboot...
Apple Mac OS X and QuickTime multiple security vulnerabilities
Multiple vulnerabilities in kernel, networking components, printing services, AFP Server, AppKit, Apple Type Services, CFNetwork, CoreGraphics, CoreText, Directory Services, diskdevcmds, Disk Images, Image Capture, ImageIO, Image RAW, Password Server, QuickLook, QuickTime, Safari RSS, Time Machin...
Dahua DVR authentication bypass
Some commands may be executed without authentication via TCP/37777 protocol...
Android su applications privilege escalation
Unsafe environment variables and file descriptors usage...
[USN-2026-1] libvirt vulnerability
========================================================================== Ubuntu Security Notice USN-2026-1 November 11, 2013 libvirt vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
torque authentication bypass
It's possible to queue code execution by connecting directly to pbsmom port. Shell characters vulnerability...
lighttpd multiple security vulnerabilities
Protection bypass, privilege escalation, memory corruption...
XSS on Juniper JUNOS 11.4 Embedthis Appweb 3.2.3
Vulnerability Type: XSS Cross-Site Scripting - Original release date: November 11th, 2013 - Last revised: November 11th, 2013 - Discovered by: Andrea Bodei - A2SECURE - Severity: 4.3/10 CVSSv2 Base Scored Products and affected versions: JUNOS up to 11.4 probably 12.1 and 12.3 vulnerable...
CORE-2013-0704 - Vivotek IP Cameras RTSP Authentication Bypass
Core Security - Corelabs Advisory http://corelabs.coresecurity.com Vivotek IP Cameras RTSP Authentication Bypass 1. Advisory Information Title: Vivotek IP Cameras RTSP Authentication Bypass Advisory ID: CORE-2013-0704 Advisory URL:...
Libvirt code privilege escalation
virConnectDomainXMLToNative invalid privileges check...
[USN-2013-1] MAAS vulnerabilities
========================================================================== Ubuntu Security Notice USN-2013-1 November 07, 2013 maas vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Cisco IOS multiple security vulnerabilities
Multiple DoS conditions, information leakage...
VMWare Workstation privilege escalation
Unsafe shared library loading...
Android Superuser shell character escape vulnerability
Vulnerable releases of two common Android Superuser packages may allow malicious Android applications to execute arbitrary commands as root, either without prompting the user or after the user has denied the request: - CyanogenMod/ClockWorkMod/Koush Superuser current releases, including v1.0.2.1 ...
Superuser "su --daemon" vulnerability on Android >= 4.3
Current releases of the CyanogenMod/ClockWorkMod/Koush Superuser package may allow restricted local users to execute arbitrary commands as root in certain, non-default device configurations. Android 4.3 introduced the concept of "restricted profiles," created through the Settings - Users menu. A...
NEW VMSA-2013-0013 VMware Workstation host privilege escalation vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2013-0013 Synopsis: VMware Workstation host privilege escalation vulnerability Issue date: 2013-11-14 Updated on: 2013-11-14 initial...
[security bulletin] HPSBHF02939 rev.1 - HP Integrated Lights-Out 4 (iLO4), Remote Cross Site Scripting (XSS), Unauthorized Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03996804 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03996804 Version: 1 HPSBHF02939 rev....
Light Display Manager protection bypass
AppArmor policy is not applied correctly...
Microsoft Office multiple security vulnerabilities
Buffer overflow and memory corruption in Microsoft Word, memory corruption on WPD parsing, Outlook information leakage...
Microsoft Internet Explorer multiple security vulnerabilities
Multiple information leaks and memory corruptions...
[USN-2015-1] Linux kernel vulnerabilities
========================================================================== Ubuntu Security Notice USN-2015-1 November 08, 2013 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
XADV-2013003 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow
+--------------------------------------------------------------------+ | XADV-2013003 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow | +--------------------------------------------------------------------+ Vulnerable versions: - linux kernel 2.6.18 = Testbed: ubuntu Type: Local Impact:...
[ MDVSA-2013:265 ] kernel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:265 http://www.mandriva.com/en/support/security/ Package : kernel Date : November 10, 2013 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been found and corrected in the Linu...
Microsoft Windows multiple security vulnerabilities
GDI integer overflow, InformationCardSigninHelper ActiveX code execution, AFD driver information leak, X.509 certificates DoS, Hyper-V privilege escalation...
Stem Innovation ‘IZON’ Hard-coded Credentials (CVE-2013-6236)
Stem Innovation ‘IZON’ Hard-coded Credentials CVE-2013-6236 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Stem Innovation's IP camera called ‘IZON’ utilizes numerous hard-coded credentials within its Linux distribution and also the hidden web...
Tryton directory traversal
Directory traversal on filename processing in server response parsing...
Unicorn WB-3300NR routers crossite scripting
Crossite scripting in Web interface...
ESA-2013-074: EMC Unisphere for VMAX Information Disclosure Vulnerability
ESA-2013-074.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-074: EMC Unisphere for VMAX Information Disclosure Vulnerability EMC Identifier: ESA-2013-074 CVE Identifier: CVE-2013-3287 Severity Rating: CVSS v2 Base Score: 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C Affected products • EMC Unisphere...