4968 matches found
PT-2013-5012
Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions Folsom through Grizzly before 2013.1.4 OpenStack Image Registry and Delivery Service Glance version Havana before 2013.2 Description The issue allows remote authenticated users to...
CVE-2013-4428
OpenStack Image Registry and Delivery Service Glance Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the downloadimage policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image...
CVE-2013-4428
CVE-2013-4428 affects the OpenStack Image Registry and Delivery Service (Glance) in the Folsom/Grizzly line before 2013.1.4 and Havana before 2013.2. The issue is a flaw in the download_image policy enforcement for cached system images: after an image is cached by an authorized download, any auth...
CVE-2013-4428: Undefined Security Weakness
OpenStack Image Registry and Delivery Service Glance Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the downloadimage policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image...
Threat Outbreak Alert: Fake Fax Delivery Email Messages on May 29, 2014
Medium Alert ID: 31491 First Published: 2013 October 25 20:03 GMT Last Updated: 2014 May 30 13:36 GMT Version: 15 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax message for the recipient. The text in the email message attempts t...
USN-2003-1: Glance vulnerability
Stuart McLaren discovered that Glance did not properly enforce the 'downloadimage' policy for cached images. An authenticated user could exploit this to obtain sensitive information in an image protected by this setting...
Threat Outbreak Alert: Fake Invoice Document Delivery Email Messages on October 21, 2013
Medium Alert ID: 31401 First Published: 2013 October 22 18:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an electronic invoice for the recipient. The text in the email message attempts to convinc...
Threat Outbreak Alert: Fake Missed Delivery Notification Email Messages on October 17, 2013
Medium Alert ID: 31326 First Published: 2013 October 17 18:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed delivery attempt notification for the recipient. The text in the email message attempts to convince t...
Threat Outbreak Alert: Fake Package Delivery Notice Email Messages on October 18, 2013
Medium Alert ID: 31331 First Published: 2013 October 17 17:57 GMT Last Updated: 2013 October 18 13:24 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery failure notification for the recipient. The text in...
Threat Outbreak Alert: Fake Invoice Delivery Email Messages on October 8, 2013
Medium Alert ID: 31170 First Published: 2013 October 11 01:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain an invoice delivery email notification for the recipient. The text in the email message attempts to convince...
CVE-2013-6011: Improper Input Validation
Citrix NetScaler Application Delivery Controller ADC 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service nsconfigd crash and appliance reboot via a crafted request...
PT-2013-5920
Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC versions 10.0 through 10.0-76.6 Description The issue allows remote attackers to cause a denial of service, resulting in the crash of nsconfigd and subsequent appliance reboot, via a crafted...
Threat Outbreak Alert: Fake Package Delivery Invoice Notification Email Messages on September 25, 2013
Medium Alert ID: 30984 First Published: 2013 September 26 19:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery invoice notification for the recipient. The text in the email message attempts to convinc...
Threat Outbreak Alert: Fake Package Delivery Failure Notification Email Messages on September 26, 2013
Medium Alert ID: 30937 First Published: 2013 September 23 15:14 GMT Last Updated: 2013 September 26 13:36 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a failed package delivery notification for the recipient. The...
Threat Outbreak Alert: Fake Document Delivery Email Messages on September 18, 2013
Medium Alert ID: 30884 First Published: 2013 September 19 15:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an update on materials for the recipient. The email message attempts to persuade the recipient to open the link for...
Threat Outbreak Alert: Fake FedEx Delivery Failure Notification Email Messages on September 16, 2013
Medium Alert ID: 30831 First Published: 2013 September 17 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a parcel delivery failure notification for the recipient. The text in the email message attempts to convince...
Cisco Application Control Engine (ACE) Version
Cisco Application Control Engine ACE software is installed on the remote Cisco IOS or ACE device. It is a load-balancing and application-delivery solution for Cisco Catalyst 6500 Series switches and Cisco 7600 Series routers, and it is also available as an appliance. TRUSTED...
Threat Outbreak Alert: Fake Fax Delivery Notification Email Messages on September 11, 2013
Medium Alert ID: 30762 First Published: 2013 September 13 01:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax delivery notification for the recipient. The text in the email message attempts to convince the...
Many Flash, Java Users Running Older, Vulnerable Versions
It’s long been known that Java and Flash are favored targets of attackers, thanks to their huge install bases and numerous security issues. And the users who are targeted by these attacks aren’t doing themselves any favors either, as new research shows that 19 percent of business users are runnin...
