Operation Technology ETAP 14.1.0 - Local Privilege Escalation

Operation Technology ETAP 14.1.0 - Local Privilege Escalation Operation Technology ETAP 14.1.0 Local Privilege Escalation Vendor: Operation Technology, Inc. Product web page: http://www.etap.com Affected version: 14.1.0.0 Summary: Enterprise Software Solution for Electrical Power Systems. ETAP is...

SUSE SLES11 Security Update : SUSE Manager Client Tools (SUSE-SU-2016:1366-1)

This update for SUSE Manager Client Tools provides the following fixes and enhancements : rhnlib : - Use TLSv1METHOD in SSL Context bsc970989 suseRegisterInfo : - Fix file permissions bsc970550 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE-SU-2016:1366-1 Recommended udpate for SUSE Manager Client Tools

This update for SUSE Manager Client Tools provides the following fixes and enhancements: rhnlib: - Use TLSv1METHOD in SSL Context bsc970989 suseRegisterInfo: - Fix file permissions bsc970550...

SUSE-SU-2016:1367-1 Security update for SUSE Manager Server 2.1

This update for SUSE Manager Server 2.1 fixes the following issues: cobbler: - Add logrotate file for cobbler bsc976826 - Fix cobbler yaboot handling bsc968406, bsc966622 osad: - Fix file permissions bsc970550 rhnlib: - Use TLSv1METHOD in SSL Context bsc970989 spacewalk-backend: - Mgrnccsync: Ada...

SUSE-SU-2016:1351-1 Security update for systemd

This update for SystemD provides fixes and enhancements. The following security issue has been fixed: - Don't allow read access to journal files to users. bsc972612, CVE-2014-9770, CVE-2015-8842 The following non-security issues have been fixed: - Restore initrd-udevadm-cleanup-db.service...

CVE-2016-0194

Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive information via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2016-0194

Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive information via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

Information disclosure

Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive information via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2016-0194

Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive information via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

Debian DSA-3562-1 : tardiff - security update

Several vulnerabilities were discovered in tardiff, a tarball comparison tool. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-0857 Rainer Mueller and Florian Weimer discovered that tardiff is prone to shell command injections via shell...

Naimi.kz для заказчиков - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Naimi.kz для заказчиков published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file...

AdVenture Capitalist - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application AdVenture Capitalist published at the 'play' market has multiple vulnerabilities...

Oracle MySQL 5.7.x < 5.7.9 Insecure File Permissions

Binary data 9240.prm...

Photo Editor Collage Maker Pro - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Photo Editor Collage Maker Pro published at the 'play' market has multiple vulnerabilities...

CVE-2016-3162

The CVE-2016-3162 issue affects Drupal's File module (Drupal 7.x before 7.43 and 8.x before 8.0.4). The root cause is an access-control bypass that lets remote authenticated users who can create content or upload files read, delete, or substitute a link to a file uploaded to an unprocessed form. ...

Cisco IOS XR SCP and SFTP Modules DoS (cisco-sa-20160323-ncs)

According to its self-reported version, the Cisco IOS XR software running on the remote device is affected by a denial of service vulnerability in the Secure Copy Protocol SCP and Secure FTP SFTP modules due to insecure permissions on certain files. An authenticated, remote attacker can exploit...

Flight Pilot Simulator 3D Free - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Flight Pilot Simulator 3D Free published at the 'play' market has multiple vulnerabilities...

Order Kanji 2 - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Order Kanji 2 published at the 'play' market has multiple vulnerabilities...

クレーンゲーム - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application クレーンゲーム published at the 'play' market has multiple vulnerabilities...