UBUNTU-CVE-2017-10274

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Smart Card IO. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...

Oracle Java SE Multiple Vulnerabilities (October 2017 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 9 Update 1, 8 Update 151, 7 Update 161, or 6 Update 171. It is, therefore, affected by multiple vulnerabilities related to the following components : - 2D Little CMS 2 - Deployment - Hotspot -...

Oracle Java SE Security Updates (oct2017-3236626) 02 - Windows

Oracle Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE Smart Card IO Subcomponent Unauthorized Operation Vulnerability

Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A security vulnerability exists in the Smart Card IO subcomponen...

CVE-2017-10274

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Smart Card IO. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...

Security Flaw in Infineon Smart Cards and TPMs

A security flaw in Infineon smart cards and TPMs allows an attacker to recover private keys from the public keys. Basically, the key generation algorithm sometimes creates public keys that are vulnerable to Coppersmith's attack: While all keys generated with the library are much weaker than they...

KLA11122 Multiple vulnerabilities in Oracle Java SE, Java SE Embedded and JRockit

Multiple serious vulnerabilities have been found in Oracle Java SE. Malicious users can exploit these vulnerabilities to cause denial of service and bypass security restrictions. Below is a complete list of vulnerabilities: 1. An unspecified vulnerability in subcomponent Smart Card IO can be...

October 17, 2017—KB4041685 (Preview of Monthly Rollup)

None None...

Easy Solar Photovoltaic Design - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Easy Solar Photovoltaic Design published at the 'play' market has multiple vulnerabilities...

An Analysis of PCI DSS Requirement 11.3.4.1 and the Compliance Expectations

For some organizations, understanding, navigating, and complying with the Payment Card Industry PCI Data Security Standard DSS, especially after the release of the latest version v3.2 released in April 2016, has become confusing and/or challenging because of the inclusion of phased-in applicabili...

Design/Logic Flaw

Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 halt in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on lin...

CVE-2016-4925

Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 halt in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on lin...

CVE-2016-4925

Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 halt in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on lin...

CVE-2016-4925

CVE-2016-4925 affects Juniper JUNOSe/J Series E Series routers with IPv6 licensed and enabled. Receipt of a specifically malformed IPv6 packet can trigger a processor exception 0x68616c74 (halt) in the scheduler, causing the line card to reboot. While the line card will recover, additional malfor...

CVE-2016-4925 JUNOSe: Line Card Reset: processor exception 0x68616c74 (halt) task: scheduler, upon receipt of crafted IPv6 packet

Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 halt in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on lin...

Hyatt Hit By Credit Card Breach, Again

Hyatt Corp., hotel guests are being warned of a credit card breach, the second since December 2015. On Thursday, the hotelier identified 41 of its hotels spread across 13 countries where it confirmed unauthorized access to payment card information. China is the hardest hit by the breach with 18...

Hyatt Hotels Suffers 2nd Card Breach in 2 Years

Hyatt Corp. is alerting customers about another credit card breach at some hotels, the second major incident with the hospitality chain in as many years. Hyatt said its cyber security team discovered signs of unauthorized access to payment card information from cards manually entered or swiped at...

CVE-2015-2988

Rakuten card App for iOS 5.2.0 through 5.2.4 does not verify SSL certificates which might allow remote attackers to execute man-in-the-middle attacks...

Design/Logic Flaw

Rakuten card App for iOS 5.2.0 through 5.2.4 does not verify SSL certificates which might allow remote attackers to execute man-in-the-middle attacks...

CVE-2015-2988

The CVE-2015-2988 entry concerns the Rakuten card App for iOS, affected in versions 5.2.0 through 5.2.4. The root cause is that the app fails to verify SSL server certificates, which can permit a remote attacker to perform a man-in-the-middle (MITM) attack and potentially eavesdrop on encrypted c...