Gentoo Linux Security Advisory 201412-4 - Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. Versions less than 1.2.9-r2 are affected.
04c111d3cb8f6077f1f1c216f9e56106ab6e31444d537f25d03e8ab04ca85eb1Gentoo Linux Security Advisory 201412-3 - A vulnerability in Dovecot could allow a remote attacker to create a Denial of Service condition. Versions less than 2.2.13 are affected.
3d75dd34d40e4219d0c2b708283b8f3aac32e24327f5de51520a41dbd3e58729Gentoo Linux Security Advisory 201412-2 - A vulnerability in nfs-utils might allow remote attackers to gain access to restricted information. Versions less than 1.2.8 are affected.
6fa32705365924db0bf23d667bfe0ca7c69e8f1ae8052dbfa99f40c172c8be1aGentoo Linux Security Advisory 201412-1 - Multiple vulnerabilities have been found in QEMU, the worst of which allows context dependent attackers to cause Denial of Service. Versions less than 2.1.2-r1 are affected.
db1a5bd8e4e947de1f052c0efff6a9541782125b666407bd6f444a122ac0d75eApache has released Struts version 2.3.20 which merges various security fixes and extends an existing security mechanism to block access to given Java packages and Classes.
4edeb149fb5476c15913f77c9224f8266c491df7c2ab120e76888d96b6fcea29The InfoSec Southwest 2015 Call For Papers has been announced. The conference will be held April 11th through April 12th, 2015 in Austin, Texas.
5f14ffe6e76678c0e63364b8dddcbf079f37ac0b1175373472a9f801fa2f74c6THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus.
e4bc2fd11f97a8d985a38a31785c86d38cc60383e47a8f4a5c436351e5135f19THC-smartbrute is a smart card instruction bruteforcing tool.
2e8df2bd892bb196f2e136b1ceb44c9edc3bd85377df0177e938b4a1187f7302IceHrm versions 7.1 and below suffer from cross site request forgery, cross site scripting, local file inclusion, and code execution via remote shell upload vulnerabilities.
024f8950b2d8a7df093e5e5fcd5b56896e32300bcfc56a9697f9bf47fb17d0d4Ubuntu Security Notice 2434-2 - USN-2434-1 fixed a vulnerability in JasPer. This update provides the corresponding fix for the JasPer library embedded in the Ghostscript package. Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges. Various other issues were also addressed.
706b1ad7f27ce91c5966f7ae3849a42a2341d9ec5f87775a1aca0ee2b158be28Ubuntu Security Notice 2434-1 - Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges.
236ae488bc91f762c2f499ff3a0345d674e1e986a960676a8ae5ff555427d5c1Debian Linux Security Advisory 3091-1 - Several vulnerabilities have been discovered in getmail4, a mail retriever with support for POP3, IMAP4 and SDPS, that could allow man-in-the-middle attacks.
5153fd330ed4f8ed72047acec7b1c308232db555c4b0e53712f0924e4413a16cDebian Linux Security Advisory 3092-1 - Multiple security issues have been found in Icedove, Debian's version of errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, the bypass of security restrictions or denial of service.
60eeb4de66b7fe2e983fc257ad2a3b7695d590ac40919d44f1f85ddc2eeb8dd4Adobe's get3.adobe.com site suffered from a reflective cross site scripting vulnerability.
5d5629ac99ef89b0f45c5ad8cfe201d0e1d75d982e7e15012c86a8b9be463662Flat Calendar version 1.1 suffers from an unauthenticated html injection vulnerability that allows for cross site scripting attacks.
2739adfe142265e44d392976dc64330944172a19f38bc3ac5a95414704828815PBBoard CMS suffers from a persistent cross site scripting vulnerability.
3aae1355b65d98ebb4790fa14d3f10eb7b0d748fd10dda959c3e8deca35ca87a
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed