8168 matches found
Rescanning Applications with RIPS
Benefits One of the most important things in modern application development is to think about security in every step of the development lifecycle. Beginning with the start of the development right up until the continued deployment of patches and features - security is important in all stages of a...
Default credentials
The trove service user in 1 Openstack deployment aka crowbar-openstack and 2 Trove Barclamp aka barclamp-trove and crowbar-barclamp-trove in the Crowbar Framework has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors...
Authentication flaw
Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods AddJobSet, AddJob, and ExecuteNow that can be used to run arbitrary commands on the...
CVE-2016-9796
The CVE-2016-9796 issue affects Alcatel-Lucent OmniVista 8770 (versions 2.0–3.0). The root cause is an authentication bypass that allows an attacker to query GIOP interfaces over TCP port 30024 and invoke methods (AddJobSet, AddJob, ExecuteNow) to run arbitrary commands with NT AUTHORITY\SYSTEM p...
CVE-2016-9796
Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods AddJobSet, AddJob, and ExecuteNow that can be used to run arbitrary commands on the...
The NTP vulnerability can be caused by Windows System trigger DoS-vulnerability warning-the black bar safety net
! The researchers published for cve-2 0 1 6-9 3 1 1 vulnerability PoC of this vulnerability can cause the NTP daemon to crash, and trigger the Windows System to denial of service. The NTP Protocol can be used by hackers to exploit. NTP is a widely used Clock synchronization Protocol, this Protoco...
[SECURITY] Fedora 25 Update: docker-1.12.3-6.git9a594b9.fc25
Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...
[SECURITY] Fedora 25 Update: ansible-2.2.0.0-3.fc25
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
[SECURITY] Fedora 25 Update: docker-1.12.3-2.git91ae1d1.fc25
Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...
MS16-136: Description of the security update for SQL Server 2014 Service Pack 2 GDR: November 8, 2016
None None...
MS16-136: Description of the security update for SQL Server 2014 Service Pack 1 CU: November 8, 2016
MS16-136: Description of the security update for SQL Server 2014 Service Pack 1 CU: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create accounts, or ...
MS16-133: Description of the security update for PowerPoint Viewer 2010: November 8, 2016
MS16-133: Description of the security update for PowerPoint Viewer 2010: November 8, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, se...
MS16-136: Description of the security update for SQL Server 2012 Service Pack 3 GDR: November 8, 2016
MS16-136: Description of the security update for SQL Server 2012 Service Pack 3 GDR: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create accounts, or...
MS16-133: Description of the security update for Office 2010: November 8, 2016
MS16-133: Description of the security update for Office 2010: November 8, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
MS16-133: Description of the security update for Excel 2010: November 8, 2016
MS16-133: Description of the security update for Excel 2010: November 8, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
[SECURITY] Fedora 24 Update: ansible-2.2.0.0-3.fc24
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2016:2726-1)
IBM Java 8 was updated to version 8.0-3.10 to fix the following security issues : - CVE-2016-3485: Unspecified vulnerability allowed local users to affect integrity via vectors related to Networking - CVE-2016-3511: Unspecified vulnerability allowed local users to affect confidentiality, integrit...
Moderate: Red Hat Security Advisory: docker security and bug fix update
An update for docker is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
Advantech WebAccess Vulnerabilities
OVERVIEW Ilya Karpov of Positive Technologies, Ivan Sanchez, Andrea Micalizzi, Ariele Caltabiano, Fritz Sands, Steven Seeley, and an anonymous researcher have identified multiple vulnerabilities in Advantech WebAccess application. Many of these vulnerabilities were reported through the Zero Day...
