Malicious File Detection

Binary data wmimalwarescanfilescan.nbin...

Exagrid Known Private Key Vulnerability (SSH) - Active Check

The Exagrid device is using a known SSH private key. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

F5 Networks BIG-IP : glibc vulnerability (K23946311)

The strftime function in the GNU C Library aka glibc or libc6 before 2.23 allows context-dependent attackers to cause a denial of service application crash or possibly obtain sensitive information via an out-of-range time value. CVE-2015-8776 C Tenable Network Security, Inc. The descriptive text...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-firefox-38.7.1esr-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...

Gratipay: suppress version in Server header on gratipay.com or grtp.co

Summary: Server version information is returned in the response headers. Estimated severity: Low More info: Any page requested on the site returns a lot of information in the response headers. This information includes specific version information for the server and proxy. The following version...

Gentoo Security Advisory GLSA 201603-11

Gentoo Linux Local Security Checks GLSA 201603-11 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Adobe Air Security Update (APSB16-08) - Mac OS X

Adobe Air is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:adobeair"; ifdescription...

Fedora 22 : rubygem-actionview-4.2.0-3.fc22 (2016-fa0dec2360)

Security fix for CVE-2016-0752 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Update for rubygem-actionview FEDORA-2016-97002

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JavaScript Malicious Escape Obfuscation Technique

Known exploits could potentially bypass security products by using JavaScript obfuscation techniques. Obfuscated exploits might not be detected by IDS and IPS systems, thus allowing attackers to successfully attack the target web client...

MS16-014: Description of the security update for Windows: February 9, 2016

None None...

MS16-017: Security update for Remote Desktop display driver to address elevation of privilege: February 9, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege if an authenticated attacker uses RDP to log on to the target system and sends specially crafted data over the connection.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could...

MS16-014: Security update for Microsoft Windows to address remote code execution: February 9, 2016

Resolves vulnerabilities in Microsoft Windows that could allow remote code execution if an attacker can log on to a target system and run a specially crafted application.SummaryThis security update resolves vulnerabilities in Windows. The most severe of the vulnerabilities could allow remote code...

Juniper ScreenOS SSH / Telnet Authentication Backdoor

The account 'netscreen' on the remote host has the password ' %sun='%s' = %u', a known backdoor password. The affected devices are firewalls and VPN gateways. A remote attacker can exploit this vulnerability to gain administrative access and monitor network traffic, deny network access, and alter...

Cisco Prime Collaboration Assurance Default Account Credentials Vulnerability

Cisco Prime Collaboration Assurance PCA is a set of enterprise collaboration network management solutions from Cisco. A security vulnerability exists in Cisco PCA prior to version 11.0. A remote attacker could exploit the vulnerability to gain access by creating an SSH session with a known accoun...

Microsoft Windows Kernel-Mode Drivers Code Execution Vulnerability (3119075)

This host is missing an important security update according to Microsoft Bulletin MS15-135. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Dell eDellRoot / DSDTestProvider Root CA Certificates Installed

The remote Windows host is affected by a man-in-the-middle MitM vulnerability due to the installation of a non-authorized root CA certificate into the Windows trusted system certificate store. The private keys for many of these root CAs are publicly known. Furthermore, websites that use specially...

Adobe Flash Player for Mac <= 19.0.0.207 Vulnerability (APSB15-27)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 19.0.0.207. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow a remote attacker to execute arbitrary code. CVE-2015-7645, CVE-2015-7647,...

SUSE: Security Advisory for flash-player (SUSE-SU-2015:0163-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for flash-player (SUSE-SU-2014:1650-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...