Filter
AND
AND
OpenSSL OpenSSLThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CB…
4.3
First published (updated )
Fedoraproject Fedorapacket.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash pa…
5.9
First published (updated )
Fedoraproject Fedorapip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the…
6.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
NumPy NumPy(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/te…
5.5
First published (updated )
Duckcorp Bipconnection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to c…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Canonical Ubuntu LinuxMozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey be…
5.9
First published (updated )
Canonical Ubuntu LinuxMozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute…
4.3
First published (updated )
Mozilla FirefoxMozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which …
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Duckcorp BipBip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descri…
5.1
First published (updated )
Fedoraproject FedoraReview Board: URL processing gives unauthorized users access to review lists
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiMediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password chang…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xen XenThe x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not pro…
5.8
First published (updated )
Cacti Cactilib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execu…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.