Parodia versions 6.8 and below suffer from multiple remote SQL injection vulnerabilities.
3346fbc895106be67797c2ad22951a0528f242762f726de17bfbffbe295c2925Gentoo Linux Security Advisory 201206-27 - A vulnerability in mini_httpd could allow remote attackers to execute arbitrary code. Versions 1.19 are affected.
87c1bf2ba044441fd74540a0b65c69fbd2d27400adcbdd091fba40fccb179827Debian Linux Security Advisory 2498-1 - It was discovered that dhcpcd, a DHCP client, was vulnerable to a stack overflow. A malformed DHCP message could crash the client, causing a denial of service, and potentially remote code execution through properly designed malicious DHCP packets.
2a1985d21c5fc5cfea58dab1c087d2cbcd793d34c92dfbc5e4ad65f8a1d75a90Red Hat Security Advisory 2012-1037-01 - PostgreSQL is an advanced object-relational database management system. A flaw was found in the way the crypt() password hashing function from the optional PostgreSQL pgcrypto contrib module performed password transformation when used with the DES algorithm. If the password string to be hashed contained the 0x80 byte value, the remainder of the string was ignored when calculating the hash, significantly reducing the password strength. This made brute-force guessing more efficient as the whole password was not required to gain access to protected resources.
43dd84d900e99c3f1b88175c8d6cb0d767071c6eb772b1ec31adf8ed1f003585Red Hat Security Advisory 2012-1036-01 - PostgreSQL is an advanced object-relational database management system. A flaw was found in the way the crypt() password hashing function from the optional PostgreSQL pgcrypto contrib module performed password transformation when used with the DES algorithm. If the password string to be hashed contained the 0x80 byte value, the remainder of the string was ignored when calculating the hash, significantly reducing the password strength. This made brute-force guessing more efficient as the whole password was not required to gain access to protected resources.
91db521987a8f25ecabb7834e60cc56577345d64eb97ff886fb0176153721100Gentoo Linux Security Advisory 201206-26 - Multiple vulnerabilities have been found in RPM, possibly allowing local attackers to gain elevated privileges or remote attackers to execute arbitrary code. Versions less than 4.9.1.3 are affected.
ab1825cda7c1f6e700c1cf9925ad6cba5cb080ac3b1c27843cc194156b51709dSecunia Security Advisory - Gentoo has issued an update for nvidia-drivers. This fixes a vulnerability, which can be exploited by malicious, local users to potentially gain escalated privileges.
9e50364a12c33dbcbc013f61c0af563a7687b577122394e9930f5e34531d87bfWinamp version 5.13 suffers from an exception handling vulnerability that can result in a denial of service condition.
2127aabbcaa4db304cf0c119fce2dc6c3fd0e678df17d3ddab23e717e65636b1Secunia Security Advisory - Sammy Forgit has discovered a vulnerability in the Drag & Drop Gallery module for Drupal, which can be exploited by malicious people to compromise a vulnerable system.
0e4390dcf46f15cb94e69b8490fd3c9b102922d55f8283059657ffef3c6c8753Secunia Security Advisory - Gentoo has issued an update for tomcat. This fixes multiple weaknesses, security issues, and vulnerabilities, which can be exploited by malicious, local users to disclose sensitive information, bypass certain security restrictions, and cause a DoS (Denial of Service), by malicious users to disclose sensitive information and manipulate certain data, and by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, disclose sensitive information, manipulate certain data, and cause a DoS (Denial of Service).
80a7c7a708ad39d61210edb038889d801fd414d6e89c8b569b3116bc72aaca24Secunia Security Advisory - Gentoo has issued an update for apache. This fixes two weaknesses, a security issue, and multiple vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions and gain escalated privileges and by malicious people to bypass certain security restrictions, disclose potentially sensitive information, and cause a DoS (Denial of Service).
5dcde0570daa54490d4a2ecaf350348ea6ae8c4b09304ba20e077bcb242c2242Secunia Security Advisory - Gentoo has issued an update for gdk-pixbuf. This fixes a weakness and a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise an application using the library.
0ec08f1de610825e55d4dc9bc56097943734a2ba92f6134df2e71afb5f3f15e1Secunia Security Advisory - Gentoo has issued an update for adobe-flash. This fixes a vulnerability, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system.
078b25aa7ef2396a9e4ae66f18f4d05328b1f931339891c2cd3155bd208017efSecunia Security Advisory - Gentoo has issued an update for Samba. This fixes a weakness and multiple security issues and vulnerabilities, which can be exploited by malicious, local users to disclose potentially sensitive information, cause a DoS (Denial of Service), and potentially gain escalated privileges by malicious users to bypass certain security restrictions, cause a DoS (Denial of Service), and potentially compromise a vulnerable system, and by malicious people to compromise a vulnerable system.
c79178d72ece27c580dbcd0d83a3e6661180e509bc99f32abf30c0e01eb6d0beSecunia Security Advisory - Gentoo has issued an update for pycrypto. This fixes a weakness, which can be exploited by malicious people to conduct brute force attacks.
dc80a711afd55aafd17392796551661a3994f9eb6a158c8fb0274f68b5cf4ed5Secunia Security Advisory - Debian has issued an update for python-crypto. This fixes a weakness, which can be exploited by malicious people to conduct brute force attacks.
1da34bccbc972e9e82edbd3e546f7e6ed908bd526a4ef4849070525b4e3c5e6aSecunia Security Advisory - Debian has issued an update for dhcpcd. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
40eb5006bc32446693c51cb6c8341367574cc2edb04f89b5aeaad893c39804dcSecunia Security Advisory - Gentoo has issued an update for TagLib. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) in an application using the library.
86bd468419963a06ccc4d03b2eb1ccc261e769ac0200fdc6c49b7a8bb986008bSecunia Security Advisory - Debian has issued an update for icedove. This fixes multiple vulnerabilities, which can be exploited by malicious people to compromise a user's system.
4eef791acd2898c6c1a912467be68aea0cac20ed89499382e5008f06184798d7Secunia Security Advisory - Gentoo has acknowledged a vulnerability in mini_httpd, which can be exploited by malicious people to compromise a vulnerable system.
e6490165d846da9d183685c5d975888943930ecf8110ab08f74742988d096171Secunia Security Advisory - A vulnerability has been reported in the Virtuemart Shipping by State component for Joomla!, which can be exploited by malicious people to bypass certain security restrictions.
b712a8b77f67078c9b57b3c680de90e5a879850c22bccb25c719c4daebd451c1Secunia Security Advisory - Debian has issued an update for mantis. This fixes multiple vulnerabilities, which can be exploited by malicious users to bypass certain security restrictions.
3af1748a1690e3a18280e79b3c8ea672fe296d7ae0ef57cdd4e9b03d062543f1Secunia Security Advisory - Debian has issued an update for xen. This fixes two vulnerabilities, which can be exploited by malicious, local users in a guest virtual machine to cause a DoS (Denial of Service) and gain escalated privileges.
8c09bd823ded4e4d5e0555318e10ea7170835f1c96308243316cd1e41a6954bcUCCASS versions 1.8.1 and below suffer from a remote blind SQL injection vulnerability.
b8c072201969e215c928967dd018fca97955e7ebb45ed7b5871beabe68f2e728SugarCRM CE versions 6.3.1 and below suffer from an unserialize() PHP code execution vulnerability.
aab5a6efe1a4cde61efe9db861472c86ce178987dbf7a7fa592b500fdf1a7a17
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed