PT-2014-3397

Name of the Vulnerable Software and Affected Versions SAP Software Deployment Manager SDM affected versions not specified Description The issue allows remote attackers to cause a denial of service, related to failed authentications. Recommendations At the moment, there is no information about a...

CVE-2013-7366: Improper Authentication

The SAP Software Deployment Manager SDM, in certain unspecified conditions, allows remote attackers to cause a denial of service via vectors related to failed authentications...

Cross site scripting

Cross-site scripting XSS vulnerability in the web interface on Huawei Echo Life HG8247 routers with software before V100R006C00SPC127 allows remote attackers to inject arbitrary web script or HTML via an invalid TELNET connection attempt with a crafted username that is not properly handled during...

PT-2014-3569

Name of the Vulnerable Software and Affected Versions Huawei Echo Life HG8247 routers versions prior to V100R006C00SPC127 Description A cross-site scripting XSS issue exists in the web interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted username in an invalid...

CVE-2014-0337: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web interface on Huawei Echo Life HG8247 routers with software before V100R006C00SPC127 allows remote attackers to inject arbitrary web script or HTML via an invalid TELNET connection attempt with a crafted username that is not properly handled during...

Security changes in Opera 20 update

Security Security changes in Opera 20 update Share March 13th, 2014 We have just released a silent update of Opera 20, you would most likely not even have noticed. From a security perspective, we have made two interesting changes in this update. The first one regards what we call the badge, the...

Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on February 17, 2014

Medium Alert ID: 32895 First Published: 2014 February 17 21:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed delivery notification for the recipient. The text in the email message attempts to convince the...

DEBIAN-CVE-2011-5268

connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service file descriptor consumption and crash via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 becaus...

CVE-2013-5440

IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation...

Information disclosure

IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation...

CVE-2013-5440

IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation...

CVE-2013-5440: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation...

Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on May 6, 2015

Medium Alert ID: 31863 First Published: 2013 November 21 20:35 GMT Last Updated: 2015 May 7 12:18 GMT Version: 80 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed delivery notification for the recipient. The te...

Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on November 5, 2013

Medium Alert ID: 31637 First Published: 2013 November 5 19:25 GMT Last Updated: 2013 November 6 15:52 GMT Version: 2 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed delivery notification for the recipient. The...

CVE-2013-4434

Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames...

Scientific Linux Security Update : ccid on SL5.x i386/x86_64 (20130930)

An integer overflow, leading to an array index error, was found in the way the CCID driver processed a smart card's serial number. A local attacker could use this flaw to execute arbitrary code with the privileges of the user running the PC/SC Lite pcscd daemon root, by default, by inserting a...

CVE-2013-2197

The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal, when using the login delay option, allows remote attackers to cause a denial of service CPU consumption via a large number of failed login attempts...

PT-2013-3588

Name of the Vulnerable Software and Affected Versions Drupal Login Security module versions 6.x-1.x before 6.x-1.3 Drupal Login Security module versions 7.x-1.x before 7.x-1.3 Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by making a lar...

Force password reset for all users

Administrators should have an easy way to force users to change passwords in bulk format in emergencies. Has this been discussed as a possible feature? Are there drawbacks to having a mass password reset force in administration? Would setting password expiration to 1 day expire all passwords in 2...

Oracle Linux 5 : ImageMagick (ELSA-2012-0301)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0301 advisory. - Add fix for CVE-2010-4167 767142 Fix assertion failed when using 'identify -verbose' when theres no image information available 502626 Fix memory allocation...