Session fixation

The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2013-0529

Summary (CVE-2013-0529) : IBM Sterling Connect:Direct Browser (part of IBM Sterling Control Center ecosystem) is affected by a cookie-security flaw where the session cookie is not marked with the Secure attribute in HTTPS sessions. Affected products/versions include IBM Sterling Connect:Direct Br...

CVE-2013-0529

The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

Fedora Update for konsole FEDORA-2013-10182

Check for the Version of konsole OpenVAS Vulnerability Test Fedora Update for konsole FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for kdeplasma-addons FEDORA-2013-10182

Check for the Version of kdeplasma-addons OpenVAS Vulnerability Test Fedora Update for kdeplasma-addons FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for kbruch FEDORA-2013-10182

Check for the Version of kbruch OpenVAS Vulnerability Test Fedora Update for kbruch FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for libksane FEDORA-2013-10130

Check for the Version of libksane OpenVAS Vulnerability Test Fedora Update for libksane FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for kanagram FEDORA-2013-10130

Check for the Version of kanagram OpenVAS Vulnerability Test Fedora Update for kanagram FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for ksaneplugin FEDORA-2013-10130

Check for the Version of ksaneplugin OpenVAS Vulnerability Test Fedora Update for ksaneplugin FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for kmix FEDORA-2013-10130

Check for the Version of kmix OpenVAS Vulnerability Test Fedora Update for kmix FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

cache_control

This plugin analyzes every HTTPS response and reports instances of incorrect cache control which might lead the users browser to cache sensitive contents on their system. The expected headers for HTTPS responses are: Pragma: No-cache Cache-control: No-store Plugin type Grep Options This plugin...

un_ssl

This plugin verifies that URLs that are available using HTTPS arent available over an insecure HTTP protocol. To detect this, the plugin simply requests "https://abc/a.asp" and "http://abc.asp" and if both are equal, a vulnerability is found. Plugin type Audit Options This plugin doesnt have any...

ssl_certificate

This plugin audits SSL certificate parameters. One configurable parameter exists: minExpireDays CA PEM file path Note: Its only usefull when testing HTTPS sites. Plugin type Audit Options Name | Type | Default Value | Description | Help ---|---|---|---|--- minExpireDays | integer | 30 | Set minim...

Fedora Update for mod_security FEDORA-2013-9518

Check for the Version of modsecurity OpenVAS Vulnerability Test Fedora Update for modsecurity FEDORA-2013-9518 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Veeam Management Pack v6 Required Ports and Permissions

Solution Required Permissions Connection to Virtual Servers VI Object | Required Permissions ---|--- vCenter, ESXi Host | Read-Only1 Host.CIM.CIM Interaction2 Datastore.Browse Datastore3 Datastore.Configure Datastore3 Datastore Cluster.Browse Datastore Cluster3 1 Minimum required permission over...

APPLE-SA-2013-05-16-1 iTunes 11.0.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-16-1 iTunes 11.0.3 iTunes 11.0.3 is now available and addresses the following: iTunes Available for: Mac OS X v10.6.8 or later, Windows 7, Vista, XP SP2 or later Impact: An attacker in a privileged network position may manipulate HTTP...

CVE-2013-1014

Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate...

Code injection

Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate...

CVE-2013-1014

Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate...

CVE-2013-1014

Apple iTunes before 11.0.3 is affected by a certificate validation flaw: it does not properly verify X.509 certificates, allowing a man-in-the-middle to spoof HTTPS servers with an arbitrary valid certificate. The vulnerability concerns iTunes on Windows and macOS platforms; exploitation could en...