3920 matches found
Data loss risk with Backup Copy to Data Domain via DDBoost
Challenge Backup Copy job retention processing overlapping with the DD Clean process garbage collection may result in data loss. Cause Backup Copy job retention processing overlapping with the DD Clean process garbage collection may result in data loss due to Data Domain erroneously processing fi...
Lax Crossdomain Policy Puts Yahoo Mail At Risk
Yahoo has made strides in battening down its security in the last 12 months, most publicly with its decision to enable end-to-end encryption for its email service, turn on SSL by default, and encrypt links between its data centers. There are still some darkened corners of its infrastructure,...
Insecure management of login credentials in PicsArt Photo Studio for Android [STIC-2014-0426]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Fundacion Dr. Manuel Sadosky - Programa STIC Advisory http://www.fundacionsadosky.org.ar Insecure management of login credentials in PicsArt Photo Studio for Android 1. Advisory Information Title: Insecure management of login credentials in PicsArt...
Missing SSL certificate validation in MercadoLibre app for Android [STIC-2014-0211]
Fundacion Dr. Manuel Sadosky - Programa STIC Advisory www.fundacionsadosky.org.ar Missing SSL certificate validation in MercadoLibre app for Android 1. Advisory Information Title: Missing SSL cert validation in MercadoLibre app for Android Advisory ID: STIC-2014-0211 Advisory URL:...
PicsArt Photo Studio For Android Insecure Management
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Fundación Dr. Manuel Sadosky - Programa STIC Advisory http://www.fundacionsadosky.org.ar Insecure management of login credentials in PicsArt Photo Studio for Android 1. Advisory Information Title: Insecure management of login credentials in PicsArt...
PicsArt Photo Studio For Android Insecure Management Vulnerability
PicsArt Photo Studio for Android fails to properly validate SSL certificates from the server. Insecure management of login credentials in PicsArt Photo Studio for Android 1. Advisory Information Title: Insecure management of login credentials in PicsArt Photo Studio for Android Advisory ID:...
CVE-2014-8533
McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection...
CVE-2014-8526
McAfee Network Data Loss Prevention NDLP before 9.3 allows local users to obtain sensitive information by reading a Java stack trace...
CVE-2014-8519
Unspecified vulnerability in McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to read arbitrary files via unknown vectors...
CVE-2014-8523
Cross-site request forgery CSRF vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-8532
Unspecified vulnerability in McAfee Network Data Loss Prevention before NDLP before 9.3 allows local users to obtain sensitive information and impact integrity via unknown vectors, related to partition mounting...
Design/Logic Flaw
Unspecified vulnerability in McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to read arbitrary files via unknown vectors...
Design/Logic Flaw
McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to obtain sensitive information via vectors related to open network ports...
Cross site scripting
Cross-site scripting XSS vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
Design/Logic Flaw
McAfee Network Data Loss Prevention NDLP before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Design/Logic Flaw
McAfee Network Data Loss Prevention NDLP before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log...
Design/Logic Flaw
Unspecified vulnerability in McAfee Network Data Loss Prevention before NDLP before 9.3 allows local users to obtain sensitive information and impact integrity via unknown vectors, related to partition mounting...
Information disclosure
McAfee Network Data Loss Prevention NDLP before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors...