CVE-2017-5907

The CVE-2017-5907 entry describes a vulnerability in the Great Southern Bank Great Southern Mobile Banking app for iOS prior to version 4.0.4 where the app does not verify X.509 certificates from SSL servers. This trust failure allows a man-in-the-middle attacker to spoof the bank’s server and ob...

Oracle: Security Advisory (ELSA-2014-0026)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2014-0027)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-5907

WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishandling of the resource cache of an SSL web site with an invalid X.509 certificate...

CVE-2015-5907

CVE-2015-5907 affects WebKit in Apple iOS prior to 9.0. The root cause described is the mishandling of the resource cache for SSL web sites with invalid X.509 certificates, enabling MITM-style redirection attacks. Public narrative across connected documents confirms the same description (iOS

CVE-2015-5907

WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishandling of the resource cache of an SSL web site with an invalid X.509 certificate...

Amazon Linux: Security Advisory (ALAS-2014-283)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5907

The CVE-2014-5907 entry is confirmed with concrete details across connected records: affected software is the Android app The Pet Salon (com.libiitech.petsalon) version 1.0.1. The root cause is failure to validate X.509 certificates presented by SSL servers, enabling man-in-the-middle attackers t...

Low: Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.4, 5.5, and 5.6. The Red Hat Security Response Team has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2014:0174-1)

Fix a file conflict between -devel and -headless package - Update to 2.4.4 bnc858818 - changed from xz to gzipped tarball as the first was not available during update - changed a keyring file due release manager change new one is signed by 66484681 from [email protected], see...

IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)

According to its version, the IBM Domino formerly IBM Lotus Domino on the remote host is 9.x prior to 9.0.1 Fix Pack 1 FP1. It is, therefore, affected by the following vulnerabilities : - A stack overflow issue exists due to the insecure '-z execstack' flag being used during compilation, which...

USN-2124-2: OpenJDK 6 regression

USN-2124-1 fixed vulnerabilities in OpenJDK 6. Due to an upstream regression, memory was not properly zeroed under certain circumstances which could lead to instability. This update fixes the problem. We apologize for the inconvenience. Original advisory details: A vulnerability was discovered in...

Ubuntu Update for openjdk-6 USN-2124-2

Check for the Version of openjdk-6 OpenVAS Vulnerability Test $Id: gbubuntuUSN21242.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for openjdk-6 USN-2124-2 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu Update for openjdk-6 USN-2124-1

Check for the Version of openjdk-6 OpenVAS Vulnerability Test $Id: gbubuntuUSN21241.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for openjdk-6 USN-2124-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-2124-1)

A vulnerability was discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit this to expose sensitive data over the network. CVE-2014-0411 Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data...

SuSE 11.3 Security Update : openjdk (SAT Patch Number 8874)

This openjdk update fixes several security issues. For a complete list of fixed vulnerabilities and their description please refer to : http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2014-January/025 800.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Amazon Linux AMI : java-1.7.0-openjdk (ALAS-2014-280)

An input validation flaw was discovered in the font layout engine in the 2D component. A specially crafted font file could trigger Java Virtual Machine memory corruption when processed. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions...

Important: Red Hat Security Advisory: java-1.5.0-ibm security update

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give...

RedHat Update for java-1.6.0-openjdk RHSA-2014:0097-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for java-1.6.0-openjdk RHSA-2014:0097-01

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.6.0-openjdk RHSA-2014:0097-01 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...