USN-3754-1 linux vulnerabilities

Ralf Spenneberg discovered that the ext4 implementation in the Linux kernel did not properly validate meta block groups. An attacker with physical access could use this to specially craft an ext4 image that causes a denial of service system crash. CVE-2016-10208 It was discovered that an...

Simplifying and Prioritizing Advanced Threat Response Measures

I had to go to the doctor the other day because I was miserable and sick. I don’t like going to the doctor so I waited until my stuffy nose and congestion turned into a full blown sinus infection. The doctor said this thing was going around, and I should be better in a few day with my prescriptio...

Microsoft Windows: Audit Removable Storage

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winremovablestorage.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Removable Storage Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Audit Security Group Management

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsecuritygroupmanagement.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Security Group Management Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progr...

Microsoft Windows: Audit Sensitive Privilege Use

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsensitiveprivilegeuse.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Sensitive Privilege Use Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...

PT-2018-8863 · Debian +1 · Apt +1

Name of the Vulnerable Software and Affected Versions: Advanced Package Tool APT versions 1.6.x through 1.6.3 Advanced Package Tool APT versions 1.7.x through 1.7.0alpha2 Description: The issue concerns the mirror:// method implementation in APT, which mishandles gpg signature verification for th...

Microsoft Windows: Audit Security System Extension

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsecuritysystemextension.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Security System Extension Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progr...

Microsoft Windows: Audit Group Membership

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wingroupmembership.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Group Membership Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Audit Authentication Policy Change

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winauthenticationpolicychange.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Authentication Policy Change Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Audit Credential Validation

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincredentialvalidation.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Credential Validation Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: Audit User Account Management

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winuseraccountmanagement.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit User Account Management Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Microsoft Windows: Audit System Integrity

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsystemintegrity.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit System Integrity Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

UBUNTU-CVE-2018-0501

The mirror:// method implementation in Advanced Package Tool APT 1.6.x before 1.6.4 and 1.7.x before 1.7.0alpha3 mishandles gpg signature verification for the InRelease file of a fallback mirror, aka mirrorfail...

alfasud-parts.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-666127 Description| Value ---|--- Affected Website:| alfasud-parts.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security Bulletin: A vulnerability in Apache CXF could affect IBM Performance Management products (CVE-2017-12624)

Summary Apache CXF is vulnerable to a denial of service. By using a specially crafted message attachment header, a remote attacker could exploit this vulnerability to cause the AX-WS and JAX-RS services to stop responding. Vulnerability Details CVEID: CVE-2017-12624 DESCRIPTION: Apache CXF is...

[SECURITY] Fedora 27 Update: rsyslog-8.37.0-1.fc27

Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is compatible with stock sysklogd and can be used as a drop-in replacement. Rsyslog is simple to set up,...

ThreatList: Telecom Sector Plagued with Advanced Malware

The telecom sector is being plagued with dangerous types of malware that can lead to significant loss of confidential or regulated data, a report has found. Lastline’s findings, published today, found that telecom sector threats are “ahead of the curve,” based on an analysis of threats to the...

airbrushes.com XSS vulnerability

Open Bug Bounty ID: OBB-665008 Description| Value ---|--- Affected Website:| airbrushes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

airemilitar.com XSS vulnerability

Open Bug Bounty ID: OBB-664984 Description| Value ---|--- Affected Website:| airemilitar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Windows Firewall: Domain: Settings: Display a notification

This setting controls if Windows Firewall with Advanced Security displays notifications to the user when a program is blocked from receiving inbound connections. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...