6159 matches found
PSF-2016-3 smtplib TLS stripping
The smtplib library in CPython aka Python before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block...
Kaspersky Safe Browser Security Bypass Vulnerability
Kaspersky Safe Browser is a security browser product developed by Kaspersky Lab Russia. A security bypass vulnerability exists in Kaspersky Safe Browser, which can be exploited by attackers to conduct man-in-the-middle attacks or impersonate a trusted server...
JVN#06920277: Coordinate Plus App fails to verify SSL server certificates
Coordinate Plus App provided by Toshiba Corporation fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Application Update to the latest version according to the information provided by th...
Researchers Bypass Chip and Pin Protections at Black Hat
LAS VEGAS – Credit card companies for the most part have moved away from “swipe and signature” credit cards to chip and pin cards by this point; the technology known as EMV Europay, MasterCard, and Visa which is supposed to provide consumers with an added layer of security is beginning to see som...
RHEL 7 : golang (RHSA-2016:1538) (httpoxy)
An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Moderate: Red Hat Security Advisory: samba security and bug fix update
An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
PHP < 5.6.24, 7.x <= 7.0.8 Multiple Vulnerabilities (Jul 2016) - Linux
PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...
Apache HTTP Server Man-in-the-Middle Attack Vulnerability (Jul 2016) - Windows
Apache HTTP Server is prone to a man-in-the-middle attack vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Apache HTTP Server Man-in-the-Middle Attack Vulnerability (Jul 2016) - Linux
Apache HTTP Server is prone to a man-in-the-middle attack vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SuperFish Vulnerability - Lenovo Support US
No description provided...
Amazon Linux AMI : python26 / python27,python34 (ALAS-2016-724)
It was found that Python's httplib library used urllib, urllib2 and others did not properly check HTTP header input in HTTPConnection.putheader. An attacker could use this flow to inject additional headers in a Python application that allows user provided header name or values. CVE-2016-5699 It w...
CVE-2016-5654
Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter...
Design/Logic Flaw
Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter...
CVE-2016-5654
Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter...
CVE-2016-5654
Misys FusionCapital Opics Plus is affected by CVE-2016-5654. A remote authenticated attacker could exploit a man-in-the-middle to tamper with the xmlMessageOut parameter and escalate privileges to administrator. The issue is tied to Misys FusionCapital Opics Plus and is described in CNVD/CERT ent...
JVN#68364327: WAONサービスアプリ App for Android fails to verify SSL server certificates
WAONサービスアプリ App for Android provided by AEON CO., LTD. fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Application Update to the latest version according to the information provided by...
Windows Print Spooler Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Print Spooler service does not properly validate print drivers while installing a printer from servers. An attacker who successfully exploited this vulnerability could use it to execute arbitrary code and take control of an affected...
MS16-087: Description of the security update for Windows print spooler components: July 12, 2016
None None...
MS16-087: Security Update for Windows Print Spooler (3170005)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Print Spooler service due to improper validation of print drivers while installing a printer from network servers. An...