Archive for the ‘SANS’ Category

(1) HIGH: HP Insight Diagnostics Buffer Overflow

|
Comments Off

Posted in SANS on January 19th, 2012 by @RISK: The Consensus Security Alert

Category: Widely Deployed Software

Affected:

  • HP Insight Diagnostics

Tags: , |

12.2.4 Microsoft Windows Object Packager Remote Code Execution

|
Comments Off

Posted in SANS on January 13th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: CVE-2012-0009

Platform: Windows

Tags: , |

12.2.3 Microsoft Windows ClickOnce Application Installer Remote Code Execution

|
Comments Off

Posted in SANS on January 13th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: CVE-2012-0013

Platform: Windows

Tags: , |

12.2.2 Microsoft Windows CSRSS Local Privilege Escalation

|
Comments Off

Posted in SANS on January 13th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: CVE-2012-0005

Platform: Windows

Tags: , |

12.2.1 Microsoft Windows Kernel SafeSEH Security Bypass

|
Comments Off

Posted in SANS on January 13th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: CVE-2012-0001

Platform: Windows

Tags: , |

12.2.18 IBM Cognos TM1 Executive Viewer Multiple Cross-Site Scripting Vulnerabilities

|
Comments Off

Posted in SANS on January 13th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: Not Available

Platform: Web Application - Cross Site Scripting

Tags: , |

12.2.25 dl Download Ticket Service Authentication Bypass

|
Comments Off

Posted in SANS on January 13th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: Not Available

Platform: Web Application

Tags: , |

12.2.24 eFront "download" Parameter Directory Traversal

|
Comments Off

Posted in SANS on January 13th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: Not Available

Platform: Web Application

Tags: , |

12.2.23 PHPIDS ReDoS Filters Security Bypass

|
Comments Off

Posted in SANS on January 13th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: CVE-2011-5021

Platform: Web Application

Tags: , |

12.2.22 ImpressCMS Cross-Site Scripting and Local File Include Vulnerabilities

|
Comments Off

Posted in SANS on January 13th, 2012 by @RISK: The Consensus Security Alert

CVEs: CVE: Not Available

Platform: Web Application

Tags: , |