HP Security Bulletin HPSBMU02964 - Potential security vulnerabilities have been identified with HP Service Manager. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), Denial of Service (DoS), execution of arbitrary code, unauthorized access, disclosure of Information, and authentication issues. Revision 1 of this advisory.
c063f157a63c0bae841f9ebeda8031d30b8036d3ba7f4f41bb8a0666b7788340Apple Security Advisory 2014-02-21-1 - iOS 6.1.6 is now available and addresses a security issue. Secure Transport failed to validate the authenticity of the connection. This issue was addressed by restoring missing validation steps.
5ff242039ba1164c5154f5b9eca7a76ae9b70fea05b0d0ef8d9136918a22e3f7Red Hat Security Advisory 2014-0204-01 - Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. It was found that the security audit functionality, as provided by Red Hat JBoss Enterprise Application Platform 6, logged request parameters in plain text. This may have caused passwords to be included in the audit log files when using BASIC or FORM-based authentication. A local attacker with access to audit log files could possibly use this flaw to obtain application or server authentication credentials.
b67208dcdf210c09e5b4aed78b79095618e66ddc70d9229c3e0746396ac3abdbApple Security Advisory 2014-02-21-3 - Apple TV 6.0.2 is now available and addresses a security issue. Secure Transport failed to validate the authenticity of the connection. This issue was addressed by restoring missing validation steps.
dd231ddc63d5bd4e78ec35443cb800485be3539a4ef4d9b0848ea0b76b742225Savsoft Quiz suffers from a cross site request forgery vulnerability.
2303cca1251931c791c673983e97fde38714e38eee850a8e9e07cfc1e5240d7eLynis is an auditing tool for Unix (specialists). It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of Unix based systems.
2c23bb33ec405502f1cf2302380570aa95d9dac1c3250e2d5c6f07200862307dPHP Secure Communications Library is a set of pure PHP implementations of DES, 3DES, RC4, Rijndael, AES, RSA (PKCS#1 compliant [v2.1]), SSH-1, SSH-2, and SFTP.
f04f1ebc8b999854c18a799dd59b76c84c87c104a095d78d9f1473fdebb25989Debian Linux Security Advisory 2867-1 - Several vulnerabilities were discovered in otrs2, the Open Ticket Request System.
add38397d641158072ed0535ee9bae0d24e191990da4d7231da74ebcb6e627d6Ubuntu Security Notice 2120-1 - Noah Misch and Jonas Sundman discovered that PostgreSQL did not correctly enforce ADMIN OPTION restrictions. An authenticated attacker could use this issue to possibly revoke access from others, contrary to expected permissions. Andres Freund discovered that PostgreSQL incorrectly handled validator functions. An authenticated attacker could possibly use this issue to escalate their privileges. Various other issues were also addressed.
039ef81162af14d534e58d3e4c726daecdff46174ce77ce12a5dd6bd5a3dade4Github suffered from a remote command execution vulnerability via variable injection.
9f7a407ba51e7296ee3742308b11d9a6e7b6f2bcb28af5feb69321525261aeefJoomla JoomLeague plugin version 2.1.12 suffers from cross site scripting and XML injection vulnerabilities.
af5baf2b9503bc98d029f951219f69ea3093ae597aa850367a0c41e1d206e812The Call For Papers for CISTI'2014, the 9th Iberian Conference on Information Systems and Technologies, has been announced. It will be held June 18th through the 21st, 2014 in Barcelona, Spain.
8577694e14454fa46996f136fc909f2b4de343843acde2aa25d46bb4ecf75696MyBB version 1.6.12 suffers from a remote SQL injection vulnerability.
6b0bf9b1bf870f7fbd330b2583ee19deb7b9bbb829e547b505627bd44daf59cdWebFilter Appliance Web-Application version 6.0.1.009 suffers from a script insertion vulnerability.
adaa2afa748caa2424e3ebe222836d0e1df898d7d7975534838213e4b4dc9f4dFreePBX versions before 2.3 suffer from a remote command execution vulnerability.
1b6ab5d6eea2edb5fba249fb2cfe50bfe3208ae7e99bf070ba3cfb23ec2b8e63
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed