Unspecified Vulnerability in Oracle Java SE 2D Subcomponent

Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A security vulnerability exists in the 2D subcomponent of Oracle...

samba: Smb signing not required by default when smb client connection is used for ipc usage

It was found that Samba did not enable integrity protection for IPC traffic by default. A man-in-the-middle attacker could use this flaw to view and modify the data sent between a Samba server and a client...

samba: Man-in-the-middle attacks possible with NTLMSSP authentication

Several flaws were found in Samba's implementation of NTLMSSP authentication. An unauthenticated, man-in-the-middle attacker could use this flaw to clear the encryption and integrity flags of a connection, causing data to be transmitted in plain text. The attacker could also force the client or...

USN-2942-1: OpenJDK 7 vulnerability

A vulnerability was discovered in the JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code...

USN-2942-1 openjdk-7 vulnerability

A vulnerability was discovered in the JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code...

PT-2016-3447 · Sqlite +5 · Sqlite +5

Name of the Vulnerable Software and Affected Versions: SQLite versions prior to 3.13.0 Description: The issue is related to insufficient input validation in the os unix.c component of the SQLite database management system. This could allow an attacker to access sensitive information, compromise...

The vulnerability of Nettle’s cryptographic library allows a hacker to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the ecc256modq function in the Nettle cryptographic library is related to errors in the encryption algorithm. Exploiting this vulnerability could allow a remote attacker to compromise the integrity, accessibility, and confidentiality of information...

The vulnerability of the Oracle Sun Systems Product Suite software allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Integrated Lights Out Manager ILOM component in the Oracle Sun Systems Product Suite is related to code errors. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, availability, and confidentiality of information...

Samsung SW Update Tool MiTM

1. Advisory Information Title: Samsung SW Update Tool MiTM Advisory ID: CORE-2016-0003 Advisory URL: Date published: 2016-03-09 Date of last update: 2016-03-04 Vendors contacted: Samsung Release mode: Coordinated release 2. Vulnerability Information Class: Cleartext Transmission of Sensitive...

Moxa UC 7408-LX-Plus Firmware Overwrite Vulnerability

OVERVIEW NCCIC/ICS-CERT has received information from a third party that identified a firmware overwrite vulnerability in Moxa’s UC 7408-LX-Plus device. Moxa has produced instructions to reduce exposure to this vulnerability. The Moxa UC 7408-LX-Plus device has been discontinued. This vulnerabili...

IEEE Highlights Top Security Risks For Wearables

As sales of IoT devices continue to see year-over-year double digit growth, security experts are urging the wearable industry to put security front and center when it comes to designing fitness tracker hardware, firmware and backend systems. In a report released Wednesday by the IEEE Center for...

Steve Adegbite on Data Integrity

Mike Mimoso talks with Steve Adegbite, Chief Information Security Officer at ETRADE, about data integrity and some of the challenges he encounters when it comes to encrypting data and dealing with third-party access to data...

The vulnerabilities of the iOS operating system and the SQLite database management system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The multiple vulnerabilities of the iOS operating system and the database management system SQLite are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Ubuntu: Security Advisory (USN-2885-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2884-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 23 Update: openstack-swift-2.3.0-3.fc23

OpenStack Object Storage Swift aggregates commodity servers to work toget her in clusters for reliable, redundant, and large-scale storage of static obje cts. Objects are written to multiple hardware devices in the data center, with t he OpenStack software responsible for ensuring data replicatio...

Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-2884-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2884-1 advisory. Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploi...

USN-2885-1: OpenJDK 6 vulnerabilities

Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code. CVE-2016-0483, CVE-2016-0494 A...

USN-2884-1: OpenJDK 7 vulnerabilities

Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code. CVE-2016-0483, CVE-2016-0494 A...

Unspecified Vulnerability in Oracle GoldenGate (CNVD-2016-00778)

Oracle GoldenGate is the United States Oracle Oracle company for the realization of heterogeneous IT environments between the log-based real-time changes in data capture and delivery of a comprehensive software package, which supports the capture, operation and analysis of data replication betwee...