|
|
Colapse all |
Post message
Reflecting XSS Vulnerability in CMS Contenido 4.9.x-4.9.5 2014-12-24 steffen roesemann1986 gmail com Advisory: Reflecting XSS Vulnerability in CMS Contenido 4.9.x-4.9.5 Advisory ID: SROEADV-2014-03 Author: Steffen Rösemann Affected Software: CMS Contenido 4.9.x-4.9.5 (Release: 10th Dec 2014) Vendor URL: http://www.contenido.org/de/ Vendor Status: fixed CVE-ID: - ========================== Vulnerab [ more ] [ reply ] Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products 2014-12-23 Cisco Systems Product Security Incident Response Team (psirt cisco com) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products Advisory ID: cisco-sa-20141222-ntpd Revision 1.1 Last Updated 2014 December 23 13:37 UTC (GMT) For Public Release 2014 December 22 16:00 UTC (GMT) +-------------- [ more ] [ reply ] FreeBSD Security Advisory FreeBSD-SA-14:31.ntp 2014-12-23 FreeBSD Security Advisories (security-advisories freebsd org) Stored XSS Vulnerability in CMS Serendipity v.2.0-rc1 2014-12-23 steffen roesemann1986 gmail com Advisory: Stored XSS Vulnerability in CMS Serendipity v.2.0-rc1 Advisory ID: SROEADV-2014-02 Author: Steffen Rösemann Affected Software: CMS Serendipity v.2.0-rc1 (Release: 20th Dec 2014) Vendor URL: http://www.s9y.org/ Vendor Status: fixed CVE-ID: - ========================== Vulnerability Descrip [ more ] [ reply ] [SECURITY] [DSA 3109-1] firebird2.5 security update 2014-12-21 Salvatore Bonaccorso (carnil debian org) [oCERT-2014-011] UnZip input sanitization errors 2014-12-22 Andrea Barisani (lcars ocert org) #2014-011 UnZip input sanitization errors Description: The UnZip tool is an open source extraction utility for archives compressed in the zip format. The unzip command line tool is affected by heap-based buffer overflows within the CRC32 verification, the test_compr_eb() and the getZip64Data() f [ more ] [ reply ] [slackware-security] php (SSA:2014-356-02) 2014-12-23 Slackware Security Team (security slackware com) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] php (SSA:2014-356-02) New php packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/php-5.4.3 [ more ] [ reply ] [slackware-security] ntp (SSA:2014-356-01) 2014-12-23 Slackware Security Team (security slackware com) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] ntp (SSA:2014-356-01) New ntp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches [ more ] [ reply ] [slackware-security] xorg-server (SSA:2014-356-03) 2014-12-23 Slackware Security Team (security slackware com) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] xorg-server (SSA:2014-356-03) New xorg-server packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/ [ more ] [ reply ] TWiki Security Advisory - XSS Vulnerability - CVE-2014-9367 2014-12-19 Onur Yilmaz (onur netsparker com) Information -------------------- Advisory by Netsparker. Name: XSS Vulnerability with Scope and Other URL Parameters of WebSearch Affected Software : TWiki Affected Versions: 6.0.1 and possibly below Vendor Homepage : http://www.twiki.org/ Vulnerability Type : Cross-site Scripting Severity : Importa [ more ] [ reply ] TWiki Security Advisory - XSS Vulnerability - CVE-2014-9325 2014-12-19 Onur Yilmaz (onur netsparker com) Information -------------------- Advisory by Netsparker. Name: XSS Vulnerability with QUERYSTRING and QUERYPARAMSTRING in TWiki Affected Software : TWiki Affected Versions: 6.0.1 and possibly below Vendor Homepage : http://www.twiki.org/ Vulnerability Type : Cross-site Scripting Severity : Important [ more ] [ reply ] Facebook BB #18 - IDOR Issue & Privacy Vulnerability 2014-12-19 Vulnerability Lab (research vulnerability-lab com) Document Title: =============== Facebook BB #18 - IDOR Issue & Privacy Vulnerability References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1371 Facebook Security ID: 219208937 Release Date: ============= 2014-12-12 Vulnerability Laboratory ID (VL-ID): = [ more ] [ reply ] Mobilis MobiConnect 3G ZDServer v1.0.1.2 - Privilege Escalation Vulnerability 2014-12-19 Vulnerability Lab (research vulnerability-lab com) Document Title: =============== Mobilis MobiConnect 3G ZDServer v1.0.1.2 - Privilege Escalation Vulnerability References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1385 Release Date: ============= 2014-12-19 Vulnerability Laboratory ID (VL-ID): ========= [ more ] [ reply ] iBackup v10.0.0.45 - Privilege Escalation Vulnerability 2014-12-19 Vulnerability Lab (research vulnerability-lab com) Document Title: =============== iBackup v10.0.0.45 - Privilege Escalation Vulnerability References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1382 Release Date: ============= 2014-12-18 Vulnerability Laboratory ID (VL-ID): =============================== [ more ] [ reply ] SEC Consult SA-20141219-0 :: XSS & Memory Disclosure vulnerabilities in NetIQ eDirectory NDS iMonitor 2014-12-19 SEC Consult Vulnerability Lab (research sec-consult com) APPLE-SA-2014-12-18-1 Xcode 6.2 beta 3 2014-12-18 Apple Product Security (product-security-noreply lists apple com) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-12-18-1 Xcode 6.2 beta 3 Xcode 6.2 beta 3 is now available and addresses the following: Git Available for: OS X Mavericks v10.9.4 or later Impact: Synching with a malicious git repository may allow unexpected files to be added to the . [ more ] [ reply ] [oCERT-2014-012] JasPer input sanitization errors 2014-12-18 Andrea Barisani (lcars ocert org) #2014-012 JasPer input sanitization errors Description: The JasPer project is an open source implementation for the JPEG-2000 codec. The library is affected by a double-free vulnerability in function jas_iccattrval_destroy() as well as a heap-based buffer overflow in function jp2_decode(). A spe [ more ] [ reply ] SEC Consult SA-20141218-1 :: OS command execution vulnerability in GParted 2014-12-18 SEC Consult Vulnerability Lab (research sec-consult com) SEC Consult SA-20141218-2 :: Multiple high risk vulnerabilities in NetIQ Access Manager 2014-12-18 SEC Consult Vulnerability Lab (research sec-consult com) iTwitter v0.04 WP Plugin - XSS & CSRF Web Vulnerability 2014-12-18 Vulnerability Lab (research vulnerability-lab com) Document Title: =============== iTwitter v0.04 WP Plugin - XSS & CSRF Web Vulnerability References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1375 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9336 CVE-ID: ======= CVE-2014-9336 Release Date: = [ more ] [ reply ] E-Journal CMS (ID) - Multiple Web Vulnerabilities 2014-12-18 Vulnerability Lab (research vulnerability-lab com) Document Title: =============== E-Journal CMS (ID) - Multiple Web Vulnerabilities References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1380 Release Date: ============= 2014-12-17 Vulnerability Laboratory ID (VL-ID): ==================================== [ more ] [ reply ] Facebook Bug Bounty #16 (Studio) - Persistent Vulnerability 2014-12-18 Vulnerability Lab (research vulnerability-lab com) Document Title: =============== Facebook Bug Bounty #16 (Studio) - Persistent Vulnerability References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1368 Facebook Security ID: 219162244 Release Date: ============= 2014-12-10 Vulnerability Laboratory ID (VL [ more ] [ reply ] Apple iOS v8.x - Message Context & Privacy Vulnerability 2014-12-18 Vulnerability Lab (research vulnerability-lab com) Document Title: =============== Apple iOS v8.x - Message Context & Privacy Vulnerability References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1346 Video: http://www.vulnerability-lab.com/get_content.php?id=1350 Release Date: ============= 2014-12-16 Vu [ more ] [ reply ] Jease CMS v2.11 - Persistent UI Web Vulnerability 2014-12-17 Vulnerability Lab (research vulnerability-lab com) Document Title: =============== Jease CMS v2.11 - Persistent UI Web Vulnerability References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1373 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8780 CVE-ID: ======= CVE-2014-8780 Release Date: ======= [ more ] [ reply ] Morfy CMS v1.05 - Command Execution Vulnerability 2014-12-17 Vulnerability Lab (research vulnerability-lab com) Document Title: =============== Morfy CMS v1.05 - Command Execution Vulnerability References (Source): ==================== http://www.vulnerability-lab.com/get_content.php?id=1367 https://github.com/Awilum/monstra-cms/issues/351 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9185 CVE [ more ] [ reply ] |
|
Privacy Statement |
It seems that it is easy to induce DRAM bit errors by doing repeated
reads from adjacent memory cells on common hw. Details are at
https://www.ece.cmu.edu/~safari/pubs/kim-isca14.pdf
. Older memory modules seem to work better, and ECC should detect
this. Paper has inner loop that should trigg
[ more ] [ reply ]