390 matches found
HP OfficeJet Printer Heartbeat Information Disclosure (Heartbleed)
According to its self-reported build information, the firmware running on the remote HP OfficeJet printer is affected by an out-of-bounds read error, known as the 'Heartbleed Bug' in the included OpenSSL version. This error is related to handling TLS heartbeat extensions that could allow an...
Western Digital Arkeia 10.1.x < 10.1.19 / 10.2.x < 10.2.9 Multiple Vulnerabilities (Heartbleed)
The self-reported version of the remote Western Digital Arkeia device is prior to 10.1.19 / 10.2.9. It is, therefore, potentially affected by the following vulnerabilities : - An out-of-bounds read error, known as the 'Heartbleed Bug', exists related to handling TLS heartbeat extensions that coul...
[security bulletin] HPSBMU03044 rev.1 - HP Business Process Monitor, running OpenSSL, Remote Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04307186 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04307186 Version: 1 HPSBMU03044 rev....
OpenSSL Receives Funding for Developers, Will Undergo Security Audit
Scarcely a month after announcing the formation of a group designed to help fund open source projects, the Core Infrastructure Initiative has decided to provide the OpenSSL Project with enough money to hire two full-time developers and also will fund an audit of OpenSSL by the Open Crypto Audit...
CA20140413-01: Security Notice for OpenSSL Heartbleed Vulnerability
CA20140413-01: Security Notice for OpenSSL Heartbleed Vulnerability Issued: April 13, 2014 Updated: May 12, 2014 CA Technologies is investigating an OpenSSL vulnerability, referred to as the "Heartbleed bug" that was publicly disclosed on April 7, 2014. CVE identifier CVE-2014-0160 has been...
Beware Of Fake 'HeartBleed Bug Remover Tool', Hijacks System with Malware
I am considering that you all must have read my last article on OpenSSL Heartbleed, a critical bug in the OpenSSL's implementation of the TLS/DTLS heartbeat extension that allows attackers to read portions of the affected server’s memory, potentially revealing users data, that the server did not...
Attachmate Reflection X Heartbeat Information Disclosure (Heartbleed)
The Attachmate Reflection X install on the remote host is affected by an out-of-bounds read error, known as the 'Heartbleed Bug' in the included OpenSSL version. This error is related to handling TLS heartbeat extensions that could allow an attacker to obtain sensitive information such as primary...
Sogou pass server operation and maintenance improper lead to information disclosure-vulnerability warning-the black bar safety net
Sogou pass server operation and maintenance improper Server sensitive information disclosure Recently broke the openssl heartbleed vulnerability, this evening there have been detailed articles and the use of tools, a detailed analysis of the articles can be seen below: https://account.sogou.com T...
The only product of operational misconduct lead to sensitive information disclosure-vulnerability warning-the black bar safety net
Subject to the openssl Heartbleed impacts, Vulnerability ID: CVE-2 0 1 4-0 1 6 0 ! https://passport.vip.com ! Repair solutions: Test of the party's time has come...
BTC China operations improper random user plaintext password leak-vulnerability warning-the black bar safety net
OpenSSL“heartbleed”vulnerability https://vip.btcchina.com ! !...
China UnionPay maintenance improperly may lead to the presence of a random log on UnionPay account and the server to obtain sensitive information-vulnerability warning-the black bar safety net
China UnionPay there is the operation and maintenance improper vulnerability OpenSSL "heartbleed" security vulnerability sign.unionpay.com In heartbleed's official website related to the CVE-2 0 1 4-0 1 6 0 vulnerability details, This is about the OpenSSL information leak vulnerabilities to cause...
IBM General Parallel File System 3.5 < 3.5.0.17 Multiple OpenSSL Vulnerabilities (Heartbleed)
A version of IBM General Parallel File System GPFS prior to 3.5.0.17 is installed on the remote host. It is, therefore, affected by multiple vulnerabilities related to OpenSSL: - An information disclosure vulnerability exists due to a flaw in the OpenSSL library, due to an implementation error in...
Critical Infrastructure Continues to Patch Heartbleed
Unified Automation issued a security advisory warning that its OPC UA software developers kit SDK for Windows contains the OpenSSL cryptography library that is vulnerable to Heartbleed. Schneider Electric, another industrial control system ICS manufacturer, posted its own advisory with mitigation...
Blue Coat ProxyAV 3.5.1.1 - 3.5.1.6 Heartbeat Information Disclosure (Heartbleed)
According to its self-reported version number, the firmware installed on the remote host is affected by an information disclosure vulnerability. An out-of-bounds read error, known as the 'Heartbleed Bug', exists related to handling TLS heartbeat extensions that could allow an attacker to obtain...
Cisco TelePresence Video Communication Server Heartbeat Information Disclosure (Heartbleed)
According to its self-reported version number, the version of Cisco TelePresence Video Communication Server installed on the remote host is affected by an out-of-bounds read error, known as the 'Heartbleed Bug' in the included OpenSSL version. This error is related to handling TLS heartbeat...
BlackBerry Updates Products Affected by Heartbleed
BlackBerry issued an advisory today that updates are available for all of its products affected by the Heartbleed OpenSSL vulnerability. The mobile device maker said that it is not aware of any exploits targeting BlackBerry products. BlackBerry Messenger BBM for Android and iPhone, as well as...
Attachmate Reflection Secure IT Windows Client Information Disclosure (Heartbleed)
The Attachmate Reflection Secure IT Windows Client install on the remote host contains a component, Reflection FTP Client, which is affected by an out-of-bounds read error, known as the 'Heartbleed Bug' in the included OpenSSL version. This error is related to handling TLS heartbeat extensions th...
Symantec Endpoint Protection Manager < 12.1 RU4 MP1a OpenSSL Heartbeat Information Disclosure (Heartbleed)
According to its self-reported version number, the version of Symantec Endpoint Protection Manager SEPM installed on the remote host is affected by an out-of-bounds read error, known as the 'Heartbleed Bug' in the included OpenSSL version. This error is related to handling TLS heartbeat extension...
Digi International Gateways Vulnerable to Heartbleed
Wireless Web mesh gateways used everywhere from industrial control environments to home area networks are vulnerable to the Heartbleed OpenSSL vulnerability. The Industrial Control System Computer Emergency Response Team ICS-CERT issued an advisory Thursday warning SCADA and ICS managers with Dig...
300,000 Servers Still Vulnerable to Heartbleed Vulnerability After One Month
It’s more than a month since we all were warned of the critical OpenSSL Heartbleed vulnerability, but that doesn't mean it disappeared. The critical bug compromised many popular websites and after been discovered the problem was solved. But is that so? No, not at all! A recent finding from the...