Threat Outbreak Alert: Fake Shipping Delivery Information Email Messages on May 19, 2014

Medium Alert ID: 34296 First Published: 2014 May 20 13:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product delivery invoice notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Failed Package Delivery Notification Email Messages on May 19, 2014

Medium Alert ID: 34276 First Published: 2014 May 19 20:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a package failure notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Shipment Delivery Failure Notification Email Messages on May 14, 2014

Medium Alert ID: 34229 First Published: 2014 May 14 15:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipment delivery notification for the recipient. The text in the email message attempts to convince the recipie...

NSF Awards $15m for New Secure Internet Architecture

The National Science Foundation NSF is awarding $15 million in grants for the development, deployment and testing of future Internet architectures that are designed to enhance security, respond to emerging service challenges, and increase scalability. In 2010, the NSF Directorate for Computer and...

Threat Outbreak Alert: Fake Order Delivery Report Notification Email Messages on May 6, 2014

Medium Alert ID: 34118 First Published: 2014 May 6 16:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a proof of delivery report notification for the recipient. The text in the email message attempts to convince the...

Design/Logic Flaw

Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and vectors, related to certificate validation...

Threat Outbreak Alert: Fake Package Delivery Failure Notice Email Messages on April 29, 2014

Medium Alert ID: 33992 First Published: 2014 April 29 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed package delivery notice for the recipient. The text in the email message attempts to convince the...

PT-2014-3508

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions 2013.2 before 2013.2.4 OpenStack Image Registry and Delivery Service Glance versions icehouse before icehouse-rc2 Description The issue allows remote authenticated users with...

CVE-2014-0162

The Sheepdog backend in OpenStack Image Registry and Delivery Service Glance 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location...

Cisco Unity Connection目录遍历漏洞

Bugtraq ID:66676 CVE ID:CVE-2014-2145 Cisco Unity Connection 可以透明地将留言和语音识别组件与您的数据网络集成到一起，不间断地提供对呼叫和留言的全面访问。 Cisco Unity Connection的消息传送API在实现上存在目录遍历漏洞，这可使经过身份验证的远程用户通过.wav文件和audio/x-wav MIME类型的访问限制，利用此漏洞读取任意文件。 0 Cisco Unity Connection 目前厂商已经发布了升级补丁以修复漏洞，请下载使用：...

Threat Outbreak Alert: Fake Package Delivery Failure Notification Email Messages on April 4, 2014

Medium Alert ID: 33657 First Published: 2014 April 4 19:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery failure notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Package Delivery Failure Notification Email Messages on April 2, 2014

Medium Alert ID: 33618 First Published: 2014 April 2 15:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery failure notification for the recipient. The text in the email message attempts to convince the...

Array Networks vxAG 9.2.0.34 and vAPV 8.3.2.17 - Multiple Vulnerabilities

vAPV: Virtual Application Delivery Controllers for Cloud and Virtualized Environments Powered by Array's award-winning 64-bit SpeedCoretm architecture, vAPV virtual application delivery controllers extend Array's proven price-performance and rich feature set to public and private clouds and...

Threat Outbreak Alert: Fake Delivery Information Notification Email Messages on August 19, 2016

Medium Alert ID: 33326 First Published: 2014 March 12 22:47 GMT Last Updated: 2016 August 22 15:21 GMT Version: 49 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipment delivery information for the recipient. The text in the email...

Citrix NetScaler应用交付控制器本地信息泄露漏洞(CVE-2013-6940)

BUGTRAQ ID: 66020 CVECAN ID: CVE-2013-6940 Citrix NetScaler是一款网络流量管理产品。 Citrix NetScaler SDX 10.0及9.3版本的应用支付控制器在实现上存在安全漏洞，攻击者可利用此漏洞将用户凭证记录到磁盘，导致信息泄露。 0 Citrix NetScaler SDX 9.x Citrix NetScaler SDX 10.x 厂商补丁： Citrix ------ Citrix已经为此发布了一个安全公告（CTX139049）以及相应补丁: CTX139049：Citrix NetScaler Applicati...

CVE-2013-6940

Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 logs user credentials, which allows attackers to obtain sensitive information via unspecified vectors...

CVE-2013-6939

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to "RADIUS authentication."...

CVE-2013-6944

CVE-2013-6944 is a cross-site scripting (XSS) vulnerability in the AAA TM vServer user interface of Citrix NetScaler ADC. Affected software includes Citrix NetScaler ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7, where remote attackers can inject arbitrary web scrip...

Government Surveillance Could Targeted Automated Updates

SAN FRANCISCO – As more Web-based services are encrypted, privacy advocates are concerned the next wave of aggressive surveillance activity could target automated update services that essentially provide Internet companies root access to machines. Chris Soghoian, principal technologist with the...

Threat Outbreak Alert: Fake Delivery Failure Notification Email Messages on February 25, 2014

Medium Alert ID: 33055 First Published: 2014 February 26 18:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a delivery failure notification from DHL for the recipient. The text in the email message attempts to convinc...