Rockwell Automation RSLinx Classic Vulnerability

RSLinx Classic is used to enable communication between Rockwell Software applications within an industrial control system. A stack buffer overflow vulnerability exists in the implementation of OPCTest.exe in RSLinx Classic versions prior to 3.73.00. This allows an attacker to exploit this...

Rockwell Automation Patches Buffer Overflow in ICS App

There is a stack buffer overflow in a Rockwell Automation application that’s used to enable communications in industrial control applications used in manufacturing, energy, water,and other environments. The vulnerability is in the RSLinx Classic product and it can be used to crash the application...

PT-2015-3376

Name of the Vulnerable Software and Affected Versions RSLinx Classic versions prior to 3.73.00 Description The issue is caused by a stack-based buffer overflow in the RSLinx Classic communication server's dynamic linking library. Exploitation of this issue may allow an attacker to impact the...

[SECURITY] Fedora 21 Update: teeworlds-0.6.3-1.fc21

The game features cartoon-themed graphics and physics, and relies heavily on classic shooter weaponry and gameplay. The controls are heavily inspired by the FPS genre of computer games...

[SECURITY] Fedora 20 Update: teeworlds-0.6.3-1.fc20

The game features cartoon-themed graphics and physics, and relies heavily on classic shooter weaponry and gameplay. The controls are heavily inspired by the FPS genre of computer games...

RHEL 6 : rhev-hypervisor6 (RHSA-2012:0109)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0109 advisory. The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization...

CVE-2014-4766

CVE-2014-4766 affects IBM Sametime Classic Meeting Server 8.0.x and 8.5.x. A remote attacker can read an exported Record and Playback (RAP) file to obtain sensitive information. The CVSSv2 base score is 5.0 (Medium) with network access and low attack complexity; no authentication required and no ...

CVE-2014-4766: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record and Playback RAP file...

PT-2014-6108

Name of the Vulnerable Software and Affected Versions IBM Sametime Classic Meeting Server versions 8.0.x through 8.5.x Description The issue allows remote attackers to obtain sensitive information by reading an exported Record and Playback RAP file. Recommendations For versions 8.0.x through 8.5....

Information disclosure

The Classic Car Buyer aka com.magazinecloner.carbuyer application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7649

The CVE-2014-7649 entry concerns the Android app The Classic Car Buyer (com.magazinecloner.carbuyer) @7F08017A. It states that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ...

PT-2014-8161

Name of the Vulnerable Software and Affected Versions The Classic Car Buyer aka com.magazinecloner.carbuyer application version @7F08017A Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This oversight allows man-in-the-middle attackers to...

CVE-2014-7649: Undefined Security Weakness

The Classic Car Buyer aka com.magazinecloner.carbuyer application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7535

The CVE-2014-7535 entry concerns the Android app Classic Racer (com.triactivemedia.classicracer). The root issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The descri...

CVE-2014-7535

The Classic Racer aka com.triactivemedia.classicracer application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7535: Undefined Security Weakness

The Classic Racer aka com.triactivemedia.classicracer application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8074

Name of the Vulnerable Software and Affected Versions The Classic Racer aka com.triactivemedia.classicracer version @7F0801AA Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This oversight allows man-in-the-middle attackers to spoof servers...

CVE-2014-7344

The Classic Arms & Militaria aka com.magazinecloner.classicarmsandm application @7F080193 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7344

CVE-2014-7344 affects the Android app Classic Arms & Militaria (package com.magazinecloner.classicarmsandm). The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

CVE-2014-7344: Undefined Security Weakness

The Classic Arms & Militaria aka com.magazinecloner.classicarmsandm application @7F080193 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...