Oracle Linux 6 : openchange (ELSA-2013-0515)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0515 advisory. evolution-mapi 0.28.3-12 - Add patch for RH bug 903241 Double-free on message copy/move 0.28.3-11 - Add patch for RH bug 902932 Cannot connect with latest samba...

Microsoft handed over encrypted messages key and Skype calls access to NSA

New top secret documents provided by Edward Snowden exposed that Microsoft worked hand-in-hand with the United States government and handed the NSA access to encrypted messages and built a series of backdoors into Outlook.com, Skype, and SkyDrive to ease difficulties in accessing online...

CVE-2013-1615

The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...

Design/Logic Flaw

The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1900-1)

Dmitry Monakhov reported a race condition flaw the Linux ext4 filesystem that can expose stale data. An unprivileged user could exploit this flaw to cause an information leak. CVE-2012-4508 An information leak was discovered in the Linux kernel's tkill and tgkill system calls when used from compa...

South Korea defense bans Smartphones for data security

South Korea's Ministry of National Defense is banning its employees from using the smart phones inside of the ministry's building in a bid to prevent military data leaks. At present, the only way to ensure sensitive corporate and Defense data is not lost is to provide employees with devices owned...

USN-1899-1: Linux kernel vulnerabilities

Dmitry Monakhov reported a race condition flaw the Linux ext4 filesystem that can expose stale data. An unprivileged user could exploit this flaw to cause an information leak. CVE-2012-4508 Dave Jones discovered that the Linux kernel's socket subsystem does not correctly ensure the keepalive acti...

PRISM like Surveillance system in France to intercept billions of communications

The US isn't the only western country with an Digital eye i.e PRISM like surveillance program, designed to monitor internet and phone communications. French is leading member at European Parliament and they voted to launch an in-depth inquiry against the US's based PRISM surveillance project. The...

Android Vulnerability Bypasses App's Digital Signature

A vulnerability exists in the Android code base that would allow a hacker to modify a legitimate, digitally signed Android application package file APK and not break the app’s cryptographic signature—an action that would normally set off a red flag that something is amiss. Researchers at startup...

Microsoft Windows Kernel Information Disclosure Vulnerability (2839229)

This host is missing an important security update according to Microsoft Bulletin MS13-048. OpenVAS Vulnerability Test $Id: secpodms13-048.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel Information Disclosure Vulnerability 2839229 Authors: Antu Sanadi Copyright: Copyright c 2013...

Fedora Update for telepathy-gabble FEDORA-2013-9794

Check for the Version of telepathy-gabble OpenVAS Vulnerability Test Fedora Update for telepathy-gabble FEDORA-2013-9794 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

[SECURITY] Fedora 18 Update: telepathy-gabble-0.16.6-1.fc18

A Jabber/XMPP connection manager, that handles single and multi-user chats and voice calls...

[SECURITY] Fedora 19 Update: telepathy-gabble-0.17.4-1.fc19

A Jabber/XMPP connection manager, that handles single and multi-user chats and voice calls...

CVE-2013-2141

The dotkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a 1 tkill or 2 tgkill system call...

CVE-2013-2141

The dotkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a 1 tkill or 2 tgkill system call...

Design/Logic Flaw

The dotkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a 1 tkill or 2 tgkill system call...

PT-2013-3559 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.8.9 Description: The issue allows local users to obtain sensitive information from kernel memory. This is due to the do tkill function in kernel/signal.c not initializing a certain data structure, which can be...

Mesa: Multiple integer overflows leading to heap-based bufer overflows

Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XF86DRIOpenConnection and 2 XF86DRIGetClientDriverName functions...

Fedora 17 : ruby-1.9.3.429-30.fc17 (2013-8411)

A vulnerability was found in DL and Fiddle in Ruby where tainted strings can be used by system calls regardless of the $SAFE level set in Ruby. This vulnerability has been assigned the CVE identifier CVE-2013-2065. This rpm will fix this issue. Note that Tenable Network Security has extracted the...

Sandcat Browser 4.0 released, new tools added for Pen-Testers

Sandcat Browser, The fastest web browser with many useful security and developer oriented tools updated to version 4.0 with the fastest scripting language packed with features for pen-testers. Sandcat 4 adds a large number of enhancements, new features, extensions and bug fixes, and provides a...