VMware Security Updates for vCenter Server (VMSA-2016-0004)

VMware vCenter Server updates address a critical security issue. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMSA-2016-0004:VMware product updates address a CRITICAL security issue in the VMware Client Integration Plugin

VMSA-2016-0004 VMware product updates address a critical security issue in the VMware Client Integration Plugin VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0004 VMware Security Advisory Synopsis: VMware product updates address a critical security issue in the VMware...

Jsprime - A JavaScript Static Security Analysis Tool

Today, more and more developers are switching to JavaScript as their first choice of language. The reason is simple JavaScript has now been started to be accepted as the mainstream programming for applications, be it on the web or on the mobile; be it on client-side, be it on the server side...

JavaScript Malicious Shifting Obfuscation Technique

Known exploits could potentially bypass security products by using JavaScript obfuscation techniques. Obfuscated exploits might not be detected by IDS and IPS systems, thus allowing attackers to successfully attack the target web client...

Oracle Supply Chain Configurator Agile Engineering Data Management Web Client Component Data Modification Vulnerability

Oracle Supply Chain Products Suite is a suite of supply chain solutions that provides value chain planning, value chain execution, and product lifecycle management. An unspecified vulnerability exists in the Oracle Supply Chain Agile Engineering Data Management Web Client component, which allows...

CVE-2016-0497

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Web Client...

CVE-2016-0497

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Web Client...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Web Client...

CVE-2016-0497

CVE-2016-0497 concerns an unspecified vulnerability in the Oracle Agile Engineering Data Management Web Client component of Oracle Supply Chain Products Suite, affecting versions 6.1.2.2, 6.1.3.0, and 6.2.0.0. The impact is to integrity via unknown vectors related to the Web Client, with remote a...

CVE-2016-0497

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Web Client...

CVE-2016-0497: Undefined Security Weakness

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Web Client...

PT-2016-4255

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management versions 6.1.2.2 through 6.2.0.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Web Client. Recommendations For...

CVE-2015-4951

Client Acceptor Daemon CAD in the client in IBM Spectrum Protect formerly Tivoli Storage Manager 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service daemon crash via a crafted Web client URL...

Code injection

Client Acceptor Daemon CAD in the client in IBM Spectrum Protect formerly Tivoli Storage Manager 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service daemon crash via a crafted Web client URL...

CVE-2015-4951: Improper Input Validation

Client Acceptor Daemon CAD in the client in IBM Spectrum Protect formerly Tivoli Storage Manager 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service daemon crash via a crafted Web client URL...

PT-2016-3635

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 5.5 through 6.3.2.4 IBM Spectrum Protect versions 6.4 through 6.4.3.0 IBM Spectrum Protect versions 7.1 through 7.1.3 Description The issue allows remote attackers to cause a denial of service, resulting in a daem...

Secure Data Space 3.1.1-2 Cross Site Scripting Vulnerability

Secure Data Space version 3.1.1-2 suffers from a cross site scripting vulnerability. Secure Data Space 3.1.1-2 Cross Site Scripting Vulnerability 1. DETAILS - ---------- Product: SECURE DATA SPACE Vendor URL: www.ssp-europe.eu Type: Cross-site ScriptingCWE-79 Date found: 2015-09-30 Date published...

Secure Data Space 3.1.1-2 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 secunet Security Networks AG Security Advisory Advisory: SECURE DATA SPACE API Multiple Non-Persistent Cross-Site Scripting Vulnerabilities 1. DETAILS - ---------- Product: SECURE DATA SPACE Vendor URL: www.ssp-europe.eu Type: Cross-site...

Apache Commons Component HttpClient HTTPS Timeout Denial of Service Vulnerability

Apache Commons contains a lot of open source tools , used to solve the usual programming often encountered problems , reduce duplication of effort . Apache Commons Components HttpClient fails to properly enforce the 'http.socket.timeout' configuration file, allowing remote attackers to exploit a...

200 Million WhatsApp Users Vulnerable to vCard Vulnerability

WhatsApp recently claimed to have hit 900 Million monthly active users, but a dangerous security flaw in the web version of the popular instant messaging app puts up to 200 Million of its users at risk. Yes, the web-based extension of WhatsApp is vulnerable to an exploit that could allow hackers ...