47153 matches found
Open-Xchange Security Advisory 2013-11-06
Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 29147 Bug ID Vulnerability type: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page Vulnerable version: prior to 7.4.0 Vulnerable component: backend Fixed version: 7.2.2-rev25, 7.4.0-rev14 Report...
ESA-2013-070: EMC Documentum Cross Site Scripting Vulnerability.
ESA-2013-070.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-070: EMC Documentum Cross Site Scripting Vulnerability. EMC Identifier: ESA-2013-070 CVE Identifier: CVE-2013-3281 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected products: • EMC Documentum Webtop...
Light Display Manager protection bypass
AppArmor policy is not applied correctly...
Dahua DVR Authentication Bypass - CVE-2013-6117
Dahua DVR Authentication Bypass - CVE-2013-6117 --Summary-- Dahua web-enabled DVRs and rebranded versions do not enforce authentication on their administrative services. Zhejiang Dahua Technology Co., Ltd. http://www.dahuasecurity.com --Affects-- Dahua web-enabled DVRs Dahua-rebranded web-enabled...
Superuser "su --daemon" vulnerability on Android >= 4.3
Current releases of the CyanogenMod/ClockWorkMod/Koush Superuser package may allow restricted local users to execute arbitrary commands as root in certain, non-default device configurations. Android 4.3 introduced the concept of "restricted profiles," created through the Settings - Users menu. A...
[USN-2025-1] Libav vulnerabilities
========================================================================== Ubuntu Security Notice USN-2025-1 November 11, 2013 libav vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Apple iOS authentication bypass
It's possible to complete AppStore transaction without entering password...
Vivotek IP cameras authentication bypass
RTSP access authentication bypass...
Cisco WAAS directory traversal
Directory traversal on file upload...
Superuser unsanitized environment vulnerability on Android <= 4.2.x
Vulnerable releases of several common Android Superuser packages may allow malicious Android applications to execute arbitrary commands as root without notifying the device owner: - ChainsDD Superuser current releases, including v3.1.3 - CyanogenMod/ClockWorkMod/Koush Superuser current releases,...
lighttpd multiple security vulnerabilities
Protection bypass, privilege escalation, memory corruption...
Libvirt code privilege escalation
virConnectDomainXMLToNative invalid privileges check...
EMC Documentum crossite scripting
Crossite scripting in different modules...
[USN-2027-1] SPICE vulnerability
========================================================================== Ubuntu Security Notice USN-2027-1 November 12, 2013 spice vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
[SECURITY] [DSA 2792-1] wireshark security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2792-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 04, 2013 http://www.debian.org/security/faq -...
CORE-2013-0704 - Vivotek IP Cameras RTSP Authentication Bypass
Core Security - Corelabs Advisory http://corelabs.coresecurity.com Vivotek IP Cameras RTSP Authentication Bypass 1. Advisory Information Title: Vivotek IP Cameras RTSP Authentication Bypass Advisory ID: CORE-2013-0704 Advisory URL:...
ESA-2013-073: EMC Documentum eRoom Multiple Cross Site Scripting Vulnerabilities.
ESA-2013-073.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-073: EMC Documentum eRoom Multiple Cross Site Scripting Vulnerabilities. EMC Identifier: ESA-2013-073 CVE Identifier: CVE-2013-3286 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected product: • EMC...
[USN-2013-1] MAAS vulnerabilities
========================================================================== Ubuntu Security Notice USN-2013-1 November 07, 2013 maas vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
XSS on Juniper JUNOS 11.4 Embedthis Appweb 3.2.3
Vulnerability Type: XSS Cross-Site Scripting - Original release date: November 11th, 2013 - Last revised: November 11th, 2013 - Discovered by: Andrea Bodei - A2SECURE - Severity: 4.3/10 CVSSv2 Base Scored Products and affected versions: JUNOS up to 11.4 probably 12.1 and 12.3 vulnerable...
Android su applications privilege escalation
Unsafe environment variables and file descriptors usage...
Cisco IOS multiple security vulnerabilities
Multiple DoS conditions, information leakage...
Apple MacOSX 10.9 Hard Link Memory Corruption
Apple MacOSX 10.9 Hard Link Memory Corruption Date: 08.11.2013 http://cxsecurity.com/ http://cvemap.org/ URL: http://cxsecurity.com/issue/WLB-2013110059 - 0. Description --- In most UNIX-like systems a hard link to a directory is only reserved for the 'root' user when possible at all. In MacOSX...
[SECURITY] [DSA 2793-1] libav security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2793-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 09, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2796-1] torque security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq -...
Open-Xchange multiple security vulnerabilities
Multiple different vulnerabilities...
Apple Mac OS X and QuickTime multiple security vulnerabilities
Multiple vulnerabilities in kernel, networking components, printing services, AFP Server, AppKit, Apple Type Services, CFNetwork, CoreGraphics, CoreText, Directory Services, diskdevcmds, Disk Images, Image Capture, ImageIO, Image RAW, Password Server, QuickLook, QuickTime, Safari RSS, Time Machin...
wireshark multiple security vulnerabilities
Vulnerabilities in different protocols dissectors...
VMWare Workstation privilege escalation
Unsafe shared library loading...
[security bulletin] HPSBHF02939 rev.1 - HP Integrated Lights-Out 4 (iLO4), Remote Cross Site Scripting (XSS), Unauthorized Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03996804 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03996804 Version: 1 HPSBHF02939 rev....
[SECURITY] [DSA 2795-1] lighttpd security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2795-1 [email protected] http://www.debian.org/security/ Michael Gilbert November 13, 2013 http://www.debian.org/security/faq -...
HP Integrated Lights-Out security vulnerabilities
Crossite scripting, information leakage...
torque authentication bypass
It's possible to queue code execution by connecting directly to pbsmom port. Shell characters vulnerability...
Dahua DVR authentication bypass
Some commands may be executed without authentication via TCP/37777 protocol...
libav memory corruptions
Memory corruptions on media formats parsing...
Android Superuser shell character escape vulnerability
Vulnerable releases of two common Android Superuser packages may allow malicious Android applications to execute arbitrary commands as root, either without prompting the user or after the user has denied the request: - CyanogenMod/ClockWorkMod/Koush Superuser current releases, including v1.0.2.1 ...
APPLE-SA-2013-11-14-1 iOS 7.0.4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-11-14-1 iOS 7.0.4 iOS 7.0.4 is now available and addresses the following: App Store Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: App and In-App purchases may be completed with...
MAAS privileg escalation
maas-import-pxe-files privilege escalations...
SPICE library buffer overflow
Buffer overflow on oversized password...
Juniper JunOS crossite scripting
Crossite scripting in EmbedThis...
NEW VMSA-2013-0013 VMware Workstation host privilege escalation vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2013-0013 Synopsis: VMware Workstation host privilege escalation vulnerability Issue date: 2013-11-14 Updated on: 2013-11-14 initial...
[USN-2015-1] Linux kernel vulnerabilities
========================================================================== Ubuntu Security Notice USN-2015-1 November 08, 2013 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
[ MDVSA-2013:265 ] kernel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:265 http://www.mandriva.com/en/support/security/ Package : kernel Date : November 10, 2013 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been found and corrected in the Linu...
Microsoft Office multiple security vulnerabilities
Buffer overflow and memory corruption in Microsoft Word, memory corruption on WPD parsing, Outlook information leakage...
Microsoft Internet Explorer multiple security vulnerabilities
Multiple information leaks and memory corruptions...
XADV-2013003 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow
+--------------------------------------------------------------------+ | XADV-2013003 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow | +--------------------------------------------------------------------+ Vulnerable versions: - linux kernel 2.6.18 = Testbed: ubuntu Type: Local Impact:...
Microsoft Windows multiple security vulnerabilities
GDI integer overflow, InformationCardSigninHelper ActiveX code execution, AFD driver information leak, X.509 certificates DoS, Hyper-V privilege escalation...
EMC Unisphere for VMAX information leakage
Under some conditions cleartext password is logged...
Varnish HTTP cache DoS
assert on empty request...
Linux kernel buffer overflow
Heap buffer overflow on eCryptfs request procesing...
[SECURITY] [DSA 2789-1] strongswan security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2789-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 01, 2013 http://www.debian.org/security/faq -...