PT-2014-9006

Name of the Vulnerable Software and Affected Versions Smoothwall Express versions 3.0 SP3 through 3.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the PROFILENAME parameter in a Save action to "httpd/cgi-bin/pppsetup.cgi" or the...

PT-2014-2197

Name of the Vulnerable Software and Affected Versions Smoothwall Express versions 3.0 SP3 and earlier, Smoothwall Express version 3.1 Description A cross-site scripting XSS issue exists in the web management interface, specifically in the httpd/cgi-bin/ipinfo.cgi file. This allows remote attacker...

CVE-2011-5283: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to inject arbitrary web script or HTML via the IP parameter in a Run action...

American Express Brings Tokenization to Payment Cards

American Express has taken steps toward lifting the burden from retailers having to store payment-card data with the announcement of its American Express Token Service. The service will replace traditional 16-digit credit card numbers with a digital token. Consumers carrying a card supporting the...

CVE-2014-6483

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2014-6483

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2014-6483: Undefined Security Weakness

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2014-6887

The EXPRESS aka com.gpshopper.express.android application 2.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The EXPRESS aka com.gpshopper.express.android application 2.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7563

Name of the Vulnerable Software and Affected Versions EXPRESS aka com.gpshopper.express.android version 2.5.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...

CVE-2014-6887: Undefined Security Weakness

The EXPRESS aka com.gpshopper.express.android application 2.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Oracle Application Express (APEX) / REST Data Services Listener Installation Detection

Binary data oracleapexlistenerinstalled.nbin...

Oracle Application Express Listener Remote Information Disclosure Vulnerability (July 2012 CPU)

The remote Oracle Application Express installation is affected by an unspecified information disclosure vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid78077; scriptversion"1.5";...

[SECURITY] Fedora 20 Update: nodejs-qs-0.6.6-3.fc20

This is a query string parser for node and the browser supporting nesting, as it was removed from 0.3.x, so this library provides the previous and commonly desired behavior and twice as fast. Used by express, connect and others...

[SECURITY] Fedora 19 Update: nodejs-qs-0.6.6-3.fc19

This is a query string parser for node and the browser supporting nesting, as it was removed from 0.3.x, so this library provides the previous and commonly desired behavior and twice as fast. Used by express, connect and others...

Information disclosure

The American Express Serve aka com.serve.mobile application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6876

The American Express Serve aka com.serve.mobile application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6876

The CVE-2014-6876 entry concerns the American Express Serve Android app (com.serve.mobile). Affected component: SSL/TLS certificate validation in the app; root cause: the application does not verify X.509 certificates from SSL servers. Impact: enables man-in-the-middle attackers to spoof servers ...

CVE-2014-6876: Undefined Security Weakness

The American Express Serve aka com.serve.mobile application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...