CVE-2015-4949

IBM Tivoli Storage Manager products expose cleartext passwords in exception messages and traces when application tracing or GUI popups occur (CVE-2015-4949; related CVE-2015-6557). Affected: TSM for Databases (SQL Server) 7.1 before 7.1.2, TSM for Mail (Exchange) 7.1 before 7.1.2, and Tivoli Stor...

The vulnerability of the Internet Explorer browser, which allows a hacker to read arbitrary local files

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to read arbitrary local files using a specially created path name...

Sen. Warren Worried About Banks' New Encrypted Messaging Platform

UPDATE–The list of politicians in Washington wringing their hands over the increasing use of encryption by consumers and businesses is growing longer by the day. Sen. Elizabeth Warren added her name to that list on Monday. Warren D-Mass. sent a letter to Attorney General Loretta Lynch expressing...

The vulnerability of the Flash Player software platform, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism...

The vulnerability of the Adobe AIR software platform, which allows a hacker to circumvent access restrictions

The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Adobe AIR software platform, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism...

The vulnerability of the Flash Player software platform, which allows a violator to circumvent access restrictions

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Flash Player software platform, which allows a violator to circumvent access restrictions

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Flash Player software platform, which allows a violator to circumvent access restrictions

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Adobe AIR software platform, which allows a hacker to circumvent access restrictions

The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Adobe AIR software platform, which allows a hacker to circumvent access restrictions

The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Moodle learning management system allows a perpetrator to gain access to protected information.

The vulnerability of the Moodle learning management system’s sub-component, lib/navigationlib.php, is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information using the student...

The vulnerability of the Adobe AIR software platform, which allows a hacker to circumvent access restrictions

The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Flash Player software platform, which allows a violator to circumvent access restrictions

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Windows operating system, which allows a perpetrator to gain access to protected information

The vulnerability of kernel-level drivers in the Windows operating system is related to the lack of protection for privileged data. Exploiting this vulnerability can allow a local attacker to gain access to protected information through a specially crafted application...

The vulnerability of the microprogrammed software of the LifeCare PCA Infusion System allows a perpetrator to gain access to the device.

The vulnerability of the microprogrammed medical device LifeCare PCA Infusion System is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to the device...

The vulnerability of the Internet Explorer browser, which allows a violator to access protected information

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially crafted web page...

The vulnerability of the Debian GNU/Linux operating system allows a perpetrator to gain access to information processed by the previous user.

Vulnerability of the Drupal subsystem of the Debian GNU/Linux operating system, with no protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to access information processed by the previous user, through analysis of the cache...

Arcserve Unified Data Protection Management getBackupPolicies Information Disclosure (CVE-2015-4069)

An information disclosure vulnerability exists in Arcserve Unified Data Protection UDP. This vulnerability exists in EdgeServiceImpl and is due to insufficient input validation of certain SOAP requests using the getBackupPolicies method. A remote unauthenticated attacker can exploit this...

How To Encrypt Your USB Drive to Protect Data

The USB flash drives or memory sticks are an excellent way to store and carry data and applications for access on any system you come across. With storage spaces already reaching 256 gigabytes, nowadays USB drives are often larger than past's hard drives. Thanks to increased storage capacity and...