4856 matches found
Unspecified Vulnerability in Oracle Java SE (CNVD-2017-00936)
Oracle Java SE is a product of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. A remote security vulnerability exists in Oracle Java SE version 8u112. An attacker cou...
Unspecified Vulnerability in Oracle Java SE (CNVD-2017-00935)
Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A remote security vulnerability exists in Oracle Java SE. An...
Oracle Java SE and JRockit Remote Security Vulnerability
Oracle Java SE and JRockit are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used for developing and deploying Java applications on desktops, servers, and embedded devices and real-time environments; JRockit is a Java virtual machine built into Oracle Fusion...
Unspecified Vulnerability in Oracle Java SE (CNVD-2017-00934)
Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A remote security vulnerability exists in Oracle Java SE. An...
Oracle Java SE and JRockit Remote Security Vulnerability (CNVD-2017-00932)
Oracle Java SE and JRockit are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used for developing and deploying Java applications on desktops, servers, and embedded devices and real-time environments; JRockit is a Java virtual machine built into Oracle Fusion...
UBUNTU-CVE-2017-3252
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAAS. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows low privileged attacker with...
CVE-2016-8318
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
UBUNTU-CVE-2017-3241
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with...
bind security update
CentOS Errata and Security Advisory CESA-2017:0062 An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
[SECURITY] Fedora 24 Update: bind99-9.9.9-4.P5.fc24
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...
Important: Red Hat Security Advisory: bind97 security update
An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
RedHat Update for bind RHSA-2017:0062-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 25 Update: bind-9.10.4-3.P5.fc25
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
U.S. Dept Of Defense: Open FTP on ███
Summary: FTP panel Allows anyone to connect to the FTP server,viewing and downloading any files hosted there. This isn't recommend especially if any sensitive information is stored Impact High severity vulnerability allowing total information disclosure of internal directories, and being allowed...
Information Disclosure
nanoc is vulnerable to information disclosure. It does not check if the requested resources embedded within HTML documents are using a protocol that degrades the security of the original connection. If the browsers do not enforce consistent protocols, it is possible to leak private information...
Real Time Network Monitoring: Cyberprobe
Real Time Network Monitoring Cyberprobe is a distrbuted architecture for real-time monitoring of networks against attack. The software consists of a number of components, including: a probe, which collects data packets and forwards it over a network in standard streaming protocols. a monitor, whi...
[SECURITY] [DLA 773-3] python-crypto regression update
Package : python-crypto Version : 2.6-4+deb7u6 CVE ID : CVE-2013-7459 Debian Bug : 849495, 850025, 850077 It was discovered that the previous attempt to fix the regression in python-crypto, a cryptographic algorithms and protocols for Python, was incorrect. This regression was initially introduce...
Ashley Madison Dating Site Agrees to Pay $1.6 Million Fine Over Massive Breach
Ashley Madison, an American most prominent dating website that helps married people cheat on their spouses has been hacked, has agreed to pay a hefty fine of $1.6 Million for failing to protect account information of 36 Million users, after a massive data breach last year. Yes, the parent company...
RHEL 6 : bind (RHSA-2016:2871)
"An update for bind is now available for Red Hat Enterprise Linux 6.2 Advanced Update Support, Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux 6.5 Telco Extended Update Support, Red Hat Enterprise Linux 6.6...
CVE-2016-8740
A vulnerability was found in httpd's handling of the LimitRequestFields directive in modhttp2, affecting servers with HTTP/2 enabled. An attacker could send crafted requests with headers larger than the server's available memory, causing httpd to crash. Mitigation As a temporary workaround - HTTP...