[SECURITY] Fedora 25 Update: epiphany-3.22.6-1.fc25

Epiphany is the web browser for the GNOME desktop. Its goal is to be simple and easy to use. Epiphany ties together many GNOME components in order to let you focus on the Web content, instead of the browser application...

The vulnerability of Google Chrome allows a hacker to obtain information about the integration platform and the operating system.

The vulnerability of the Blink component in Google Chrome exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain information about the integration platform and operating system throug...

The vulnerability of Google Chrome allows a hacker to obtain information about the integration platform and the operating system.

The vulnerability of the Blink component in Google Chrome exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain information about the integration platform and operating system throug...

The vulnerability of Google Chrome allows a hacker to obtain information about the integration platform and the operating system.

The vulnerability of the Blink component in Google Chrome exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain information about the integration platform and operating system throug...

CVE-2016-8918

IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials...

CVE-2016-8918

IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials...

CVE-2016-0394

IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files...

Code injection

IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files...

CVE-2016-0394

IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files...

Default configuration

IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials...

CVE-2016-8918

IBM Integration Bus (V10, and later) under non-default configurations could allow a remote attacker to authenticate without valid credentials, effectively bypassing authentication. The root cause is an authentication vulnerability in non-default configurations, reported as CVE-2016-8918. A fix is...

CVE-2016-8918

IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials...

CVE-2016-0394

IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files...

CVE-2016-0394

Summary: CVE-2016-0394 affects IBM Integration Bus and WebSphere Message Broker. The root cause is incorrect permissions set for an object on Unix platforms, which could allow a local attacker to manipulate certain files. Affected products/versions: IBM Integration Bus V9 and WebSphere Message Br...

snoopy: incomplete fixes for command execution flaws

Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers...

Cyber Probe - Capturing, Analysing and Responding to Cyber Attacks

Cyberprobe is a distributed software architecture for monitoring of networks against attack. It consists of two components: cyberprobe, which collects data packets and forwards them over a network in standard streaming protocols; and cybermon which decodes protocols, and invokes user-defined logi...

CVE-2017-3292

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2017-3292

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Code injection

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2017-3292

The CVE-2017-3292 issue affects Oracle PeopleSoft Products, specifically the PeopleTools component’s Integration Broker. Affected versions are 8.54 and 8.55. The vulnerability is exploitable over HTTP with network access by a low-privileged attacker and requires human interaction. Successful expl...