[SECURITY] Fedora 21 Update: python-django-1.6.10-1.fc21

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

Data loss risk with Backup Copy to Data Domain via DDBoost

Challenge Backup Copy job retention processing overlapping with the DD Clean process garbage collection may result in data loss. Cause Backup Copy job retention processing overlapping with the DD Clean process garbage collection may result in data loss due to Data Domain erroneously processing fi...

CVE-2014-8955

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

CVE-2014-8955

The CVE-2014-8955 entry describes a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Contact Form Clean and Simple” (also listed as clean-and-simple-contact-form-by-meg-nicholas) versions 4.4.0 and earlier. The issue arises from improper handling of the cscf[name] parameter submi...

CVE-2014-8955

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

PT-2014-8758

Name of the Vulnerable Software and Affected Versions Contact Form Clean and Simple plugin versions 4.4.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to the "contact-us/" endpoint. Recommendations F...

CVE-2014-8955: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

Contact Form Clean & Simple <= 4.4.0 - Cross-Site Scripting (XSS)

The Contact Form Clean and Simple WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Information disclosure

The Clean Internet Browser aka com.cleantab.browsesecure application 1.36 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4905

The Clean Internet Browser aka com.cleantab.browsesecure application 1.36 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4905

The CVE-2014-4905 entry affects The Clean Internet Browser (com.cleantab.browsesecure) for Android, version 1.36. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a cra...

PT-2014-6206

Name of the Vulnerable Software and Affected Versions The Clean Internet Browser aka com.cleantab.browsesecure version 1.36 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.50...

CVE-2014-4905: Undefined Security Weakness

The Clean Internet Browser aka com.cleantab.browsesecure application 1.36 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

[SECURITY] Fedora 20 Update: python-django15-1.5.9-1.fc20

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 20 Update: python-django-1.6.6-1.fc20

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

CVE-2014-5823

CVE-2014-5823 concerns The Cleaner - Speed up & Clean (com.liquidum.thecleaner) for Android v1.4.2, where SSL servers are not verified against X.509 certificates. This models a classic MITM risk: an attacker could spoof a trusted server and read or alter sensitive data transmitted over TLS. The c...

PT-2014-6808

Name of the Vulnerable Software and Affected Versions The Cleaner - Speed up & Clean aka com.liquidum.thecleaner version 1.4.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not veri...

PT-2014-6631

Name of the Vulnerable Software and Affected Versions AMC Security- Antivirus, Clean aka com.iobit.mobilecare version 4.4.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.50...

CVE-2014-5646: Undefined Security Weakness

The AMC Security- Antivirus, Clean aka com.iobit.mobilecare application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5823: Undefined Security Weakness

The The Cleaner - Speed up & Clean aka com.liquidum.thecleaner application 1.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...