47153 matches found
[USN-1874-1] DBus vulnerability
========================================================================== Ubuntu Security Notice USN-1874-1 June 13, 2013 dbus vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...
[security bulletin] HPSBHF02885 rev.1 - HP Integrated Lights-Out iLO3 and iLO4 using Single-Sign-On (SSO), Remote Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03787836 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03787836 Version: 1 HPSBHF02885 rev....
Microsoft Internet Explorer multiple security vulnerabilities
Multiple memory corruptions...
Microsoft Office buffer overflow
Microsoft Outlook vulnerability on messages reading is used in-the-wild...
Microsoft Windows multiple security vulnerabilities
Kernel information leakage, drivers DoS, print spooler privilege escalation...
OpenVPN cryptography weakness
It's possible to inject and decript ciphertext in UDP mode...
python-httplib insufficient certificate validation
Certificate is only validated on first request...
InfoTeCS applications weak permissions
Weak permissions for installation folder...
Apple Mac OS X Directory Service buffer overflow
Buffer overflow on response parsing...
HP Data Protector multiple security vulnerabilities
Privilege escalation, code execution, DoS...
Xen security vulnerabilities
DoS, information leakage, privilege escalation...
Cisco TelePresence Supervisor DoS
Resources exhaustion on TCP packets processing...
Zavio IP cameras multiple security vulnerabilities
Hardcoded credentials, code execution, weak permissions...
[CORE-2013-0103] Mac OSX Server DirectoryService buffer overflow
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Mac OSX Server DirectoryService buffer overflow 1. Advisory Information Title: Mac OSX Server DirectoryService buffer overflow Advisory ID: CORE-2013-0103 Advisory URL:...
[ MDVSA-2013:168 ] python-httplib2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:168 http://www.mandriva.com/en/support/security/ Package : python-httplib2 Date : May 27, 2013 Affected: Business Server 1.0 Problem Description: Updated python-httplib2 packages fix security vulnerability:...
[security bulletin] HPSBMU02883 SSRT101227 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03781657 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03781657 Version: 1 HPSBMU02883...
CORE-2013-0318 - TP-Link IP Cameras Multiple Vulnerabilities
Core Security - Corelabs Advisory http://corelabs.coresecurity.com TP-Link IP Cameras Multiple Vulnerabilities 1. Advisory Information Title: TP-Link IP Cameras Multiple Vulnerabilities Advisory ID: CORE-2013-0318 Advisory URL:...
MayGion IP cameras security vulnerabilities
Buffer overflow, directory traversal...
CORE-2013-0322 - MayGion IP Cameras multiple vulnerabilities
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ MayGion IP Cameras multiple vulnerabilities 1. Advisory Information Title: MayGion IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0322 Advisory URL:...
CVE-2013-3496. Local privilege escalation vulnerability in Infotecs products (ViPNet Client\Coordinator, SafeDisk, Personal Firewall)
CVE-2013-3496. Local privilege escalation vulnerability in Infotecs products ViPNet ClientCoordinator, SafeDisk, Personal Firewall CVE reference: CVE-2013-3496 Credit: Maksim Chudakov @MChudakov Andrey [email protected] Severity: Medium LocalRemote: Local Vulnerability Class:...
[SECURITY] [DSA 2695-1] chromium-browser security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2695-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 29, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2666-1] xen security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2666-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 12, 2013 http://www.debian.org/security/faq -...
[ MDVSA-2013:167 ] openvpn
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:167 http://www.mandriva.com/en/support/security/ Package : openvpn Date : May 27, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: Updated openvpn package fixes security...
CORE-2013-0302 - Zavio IP Cameras multiple vulnerabilities
Core Security - Corelabs Advisory http://corelabs.coresecurity.com Zavio IP Cameras multiple vulnerabilities 1. Advisory Information Title: Zavio IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0302 Advisory URL:...
[SECURITY][CVE-2013-2765][ModSecurity] Remote Null Pointer Dereference
CVE Number: CVE-2013-2765 / ModSecurity Remote Null Pointer Dereference When ModSecurity receives a request body with a size bigger than the value set by the "SecRequestBodyInMemoryLimit" and with a "Content-Type" that has no request body processor mapped to it, ModSecurity will systematically...
[ MDVSA-2013:169 ] socat
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:169 http://www.mandriva.com/en/support/security/ Package : socat Date : May 29, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in socat: ...
socat security vulnerabilities
Buffer overflow, file descriptor leakage...
LibTiff security vulnerabilities
tiff2pdf vulnerabilities...
[USN-1832-1] LibTIFF vulnerabilities
========================================================================== Ubuntu Security Notice USN-1832-1 May 21, 2013 tiff vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...
[USN-1842-1] KDE-Libs vulnerability
========================================================================== Ubuntu Security Notice USN-1842-1 May 29, 2013 kde4libs vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...
kde4libs information leakage
User's credentials are incorrectly requested under some conditions...
Monkey HTTPD 1.1.1 - Denial of Service Vulnerability
Title: ====== Monkey HTTPD 1.1.1 - Denial of Service Vulnerability Date: ===== 2013-05-28 References: =========== http://bugs.monkey-project.com/ticket/181 Introduction: ============= Monkey is a lightweight and powerful web server for GNU/Linux. It has been designed to be very scalable with low...
KDE Paste applet weak password generation
Weak PRNG...
FreeBSD NFS server memory corruption
It's possible to call readdir on plain file...
Monkey HTTPD security vulnerabilities
Crash on NULL byte in request. Buffer overflow on oversized header...
ESA-2013-040: RSA® Authentication Manager 8.0 Multiple Vulnerabilities
ESA-2013-040.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-040: RSA® Authentication Manager 8.0 Multiple Vulnerabilities EMC Identifier: ESA-2013-040 CVE Identifier: CVE-2013-0947, CVE-2013-1899 Severity Rating: CVSS v2 Base Score: See below for individual scores Affected Products: R...
ModSecurity DoS
NULL pointer dereference under some conditions...
CVE-2013-3843 Monkey HTTPD 1.2.0 - Buffer Overflow DoS Vulnerability With Possible Arbitrary Code Execution
Title CVE-2013-3843 Monkey HTTPD 1.2.0 - Buffer Overflow DoS Vulnerability With Possible Arbitrary Code Execution 2. Introduction Monkey is a lightweight and powerful web server for GNU/Linux. It has been designed to be very scalable with low memory and CPU consumption, the perfect solution for...
Sony PlayStation 3 code execution
No description provided...
Sony PS3 Firmware v4.31 - Code Execution Vulnerability
Title: ====== Sony PS3 Firmware v4.31 - Code Execution Vulnerability Date: ===== 2013-05-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=767 VL-ID: ===== 767 Common Vulnerability Scoring System: ==================================== 6.5 Introduction: ============= The...
KDE Paste Applet
The paste applet included with kdeplasma-addons allows you to define macros that will copy some generated data into the clipboard, using simple macros to define the source and format of the data. The available macros include password... which generates "random" passwords. Here is the code that...
[SECURITY] [DSA 2672-1] kfreebsd-9 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2672-1 [email protected] http://www.debian.org/security/ Florian Weimer May 22, 2013 http://www.debian.org/security/faq -...
Microsoft Security Essentials outdated libraries
Outdated runtime libraries with known vulnerabilities are installed in Windows XP / 2003...
Netgear DGN devices security vulnerabilities
Authentication bypass, code execution...
[USN-1844-1] Linux kernel vulnerability
========================================================================== Ubuntu Security Notice USN-1844-1 May 30, 2013 linux vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...
CVE-2013-3664 - Sketchup Multiple Vulnerabilities
Well, you should upgrade SketchUp to the last version 2 bugs here. ================================================================= ================================================================= Title: Sketchup MAC Pict Material Palette Stack Corruption Product: Trimble SketchUp Advisory ID:...
[ MDVSA-2013:171 ] gnutls
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:171 http://www.mandriva.com/en/support/security/ Package : gnutls Date : May 30, 2013 Affected: Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and corrected in gnutls: A flaw...
[SECURITY] [DSA 2700-1] wireshark security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2700-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 02, 2013 http://www.debian.org/security/faq -...
Imperva SecureSphere Operations Manager version 9.0.0.5 - Multiple issues
Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt =============================== - Advisory - =============================== Tittle: Imperva SecureSphere Operations Manager - Command Execution Post Authentication & Minor issues Risk: High Date: 27.May.2013...
[USN-1849-1] Linux kernel (Raring HWE) vulnerability
========================================================================== Ubuntu Security Notice USN-1849-1 May 31, 2013 linux-lts-raring vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...