9327 matches found
OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound...
OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound...
OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound...
OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound...
CVE-2014-1986
The Content Provider in the KOKUYO CamiApp application 1.21.1 and earlier for Android allows attackers to bypass intended access restrictions and read database information via a crafted application...
Design/Logic Flaw
The Content Provider in the KOKUYO CamiApp application 1.21.1 and earlier for Android allows attackers to bypass intended access restrictions and read database information via a crafted application...
CVE-2014-1986
The CVE refers to the Content Provider in KOKUYO S&T Co.’s CamiApp for Android (V1.21.1 and earlier). The root cause is that access permissions are not restricted, allowing a crafted or malicious Android application to read (and potentially modify) database information. Affected product: CamiApp ...
CVE-2014-1986: Undefined Security Weakness
The Content Provider in the KOKUYO CamiApp application 1.21.1 and earlier for Android allows attackers to bypass intended access restrictions and read database information via a crafted application...
Content Provider in CamiApp for Android fails to restrict access permissions
Overview The Content Provider in CamiApp for Android provided by KOKUYO S Co.,Ltd. contains an issue where access permissions are not restricted. Hiroshi Kumagai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impa...
JVN#55438786: Content Provider in CamiApp for Android fails to restrict access permissions
The Content Provider in CamiApp for Android provided by KOKUYO S&T Co.,Ltd. contains an issue where access permissions are not restricted. Impact If a user of the affected product uses another malicious Android application, information stored in the database may be obtained or altered. Solution...
FakeNet - Windows Network Simulation tool for Malware Analysis
FakeNet is a tool that aids in the dynamic analysis of malicious software. The tool simulates a network so that malware interacting with a remote host continues to run allowing the analyst to observe the malware’s network activity from within a safe environment. The goal of the project is to: 1. ...
Mandriva Linux Security Advisory : php-ZendFramework (MDVSA-2014:072)
Updated php-ZendFramework packages fix security vulnerabilities : XML eXternal Entity XXE and XML Entity Expansion XEE flaws were discovered in the Zend Framework. An attacker could use these flaws to cause a denial of service, access files accessible to the server process, or possibly perform...
Adobe Reader Multiple Vulnerabilities (Feb 2008) - Windows
Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...
Hardware provider is missing in Veeam Backup and Replication user interface
Challenge Backups using a specific hardware provider do not work, and the provider is missing from the user interface. Cause During a Hyper-V host rescan, available VSS providers are enumerated via a VSS API query. Then, all VSS volumes for which those providers can be used are retrieved. In some...
Phabricator: OAuth Stealing Attack (New)
Hi Evan, I found a new and more dangerous way to steal phabricator facebooks oauth tokens,codes, In this case, I exploited the behavior of Phabricator OAuth Dialog, If you provide a differnet scope in phabricator OAuth Dialog...
Java OpenID Server 1.2.1 XSS / Session Fixation
Hi, This is a public disclosure with disarmed Proof of Concept of unpatched vulnerabilities in JOIDS Java OpenID Server. "JOIDS Java OpenID Server is a multi-domain, multi-user OpenID Provider based on OpenID4Java, Spring Framework, Hibernate, Velocity" https://code.google.com/p/openid-server/...
Adult Magazine Sued LeaseWeb for Hosting Pirated Websites, claiming $188M in Damages
Perfect 10, an Adult Magazine Publisher who previously accused Google, Amazon, RapidShare, Deposit File and many more companies for Copyright Infringement, has sued LEASEWEB Hosting provider this time. LEASEWEB is the former hosting provider of File Sharing website 'Megaupload', and Perfect 10...
File Explorer (FX) For Android Path Traversal
Disclosure Date: 31 Jan 2014 Author: Keith Makan http://blog.k3170makan.com Vendor or Software Link: https://play.google.com/store/apps/details?id=nextapp.fx&hl=en Version: 2.3.0.10 Tested on: Android 3.2.1 Site : http://blog.k3170makan.com Description: File Explorer FX for Android Suffers from a...
[Fing] Tool for Network Scan and Analysis for iPhone
Highlight of features: + Discovers all devices connected to a Wi-Fi network. No limitation! + Displays the MAC Address and up-to-date Vendor names. + Customize names, icons and notes. + Wake On LAN. Switch on your cable-connected devices. + History of all discovered networks. You can review...
CREDO Mobile Publishes Industry's First Transparency Report
Credo Mobile, the small San Francisco mobile provider that is reportedly the unnamed plaintiff in a suit that challenged the legality of national security letters, yesterday published its first transparency report, the first such report published by a mobile provider. Credo, which has raised tens...