Dovecot IMAP Server rfc822_parse_domain Information Leak Vulnerability

Summary An exploitable out of bounds read vulnerability exists in the RFC822 parser as implemented in Dovecot IMAP Server 2.2.33.2. A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosu...

Survey Says: So Long Grey Skies - Telecoms 2018 Outlook

Nominum, a part of Akamai, recently partnered with Telecoms.com to survey over 1,500 telecom professionals to get a sense of their concerns, initiatives and expectations for 2018. The findings are captured in the report Telecoms.com Annual Industry Survey 2017. Top concerns, outlined A top concer...

[SECURITY] Fedora 27 Update: wavpack-5.1.0-7.fc27

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

HP LoadRunner and Performance Center Remote Code Execution Vulnerability

HPE LoadRunner and Performance Center are both performance load testing software from Hewlett Packard Enterprise HPE. A remote code execution vulnerability exists in HPE LoadRunner and Performance Center. A remote attacker could exploit this vulnerability to execute code...

NetRefer Chooses Imperva Incapsula WAF: A Case Study

Since 2005, companies have been using NetRefer’s performance marketing software to fully automate their affiliate programs. From enrollment through customer relationship management CRM, tracking, finance and rewards management and payments, NetRefer’s Unified Performance Marketing Platform...

Kernel update: Virtuozzo ReadyKernel patch 44.0 for Virtuozzo 7.0.4 and 7.0.4 HF3, and 7.0.5

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo kernels 3.10.0-514.16.1.vz7.30.10 Virtuozzo 7.0.4, 3.10.0-514.16.1.vz7.30.15 Virtuozzo 7.0.4 HF3, and 3.10.0-514.26.1.vz7.33.22 Virtuozzo 7.0.5. Vulnerability id: PSBM-80340 Hard lockups...

Kernel update: Virtuozzo ReadyKernel patch 44.0 for Virtuozzo 7.0.6 and 7.0.6 HF3

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo kernels 3.10.0-693.1.1.vz7.37.30 Virtuozzo 7.0.6 and 3.10.0-693.11.6.vz7.40.4 Virtuozzo 7.0.6 HF3. Vulnerability id: PSBM-80340 Hard lockups happened when the kernel was processing SAK Secu...

[SECURITY] Fedora 27 Update: firefox-58.0.2-1.fc27

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Trend Micro Achieves “Recommended” Rating from NSS Labs in Data Center IPS Group Test

One of the key use cases for our customers is the protection of their data center environments, which can involve moving off the perimeter into the data center or segmenting their data center from the rest of the organization. It is imperative that a data center security solution not only deliver...

Regular Expression Denial Of Service (ReDoS)

node-forge is vulnerable to regular expression denial of service ReDoS attacks. The vulnerability is caused by a weak choice of regular expression regex groups and allows a given string to cause a huge performance slow down...

Important: linux-firmware

Issue Overview: Speculative execution branch target injection An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used performance optimization. There are three primary variants of the issue which differ ...

CVE-2018-5763

An issue was discovered in OXID eShop Enterprise Edition before 5.3.7 and 6.x before 6.0.1. By entering specially crafted URLs, an attacker is able to bring the shop server to a standstill and hence, it stops working. This is only valid if OXID High Performance Option is activated and Varnish is...

CVE-2018-5763

An issue was discovered in OXID eShop Enterprise Edition before 5.3.7 and 6.x before 6.0.1. By entering specially crafted URLs, an attacker is able to bring the shop server to a standstill and hence, it stops working. This is only valid if OXID High Performance Option is activated and Varnish is...

CVE-2017-8953

A Remote Cross-Site Scripting XSS vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier was found...

CVE-2017-8953

A Remote Cross-Site Scripting XSS vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier was found...

Cross site scripting

A Remote Cross-Site Scripting XSS vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier was found...

Remote code execution

A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found...

CVE-2016-8512

A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found...

CVE-2016-8512

A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found...

CVE-2016-8512

CVE-2016-8512 concerns a remote code execution in all versions of HP LoadRunner and Performance Center via the MMS protocol. The connected sources identify a buffer overflow/RCE in the MMS handling (MMS Protocol Buffer Overflow) that can be exploited remotely by an unauthenticated attacker to exe...