1599 matches found
CVE-2016-1902
The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before 2.7.9 does not properly generate random numbers when used with PHP 5.x without the paragonie/randomcompat library and the opensslrandompseudobytes function fails, which makes it easier...
LogicalDoc Document Managment System CE: source code security analysis report
Several vulnerabilities were discovered in LogicalDOC 'LogicalDoc Document Managment System CE' software: Утечка пользовательских данных между сессиями Использование XSL трансформации для исполнения произвольного кода Отсутствие верификации цифровой подписи исполняемых файлов, полученных из...
Forbidden attack: 7 million web servers get caught by the attack of the risk-vulnerability warning-the black bar safety net
! Recently, according to some international safety panel research showed that financial giants Visa's part of the HTTPS protected site has recently been discovered a vulnerability, which can allow a hacker to inject malicious code, the visitor's browser will access to malicious content. Encryptio...
On the LinkedIn Breach, TeslaCrypt Closing Up Shop, and More
Mike Mimoso and Chris Brook discuss the news of the week, including the LinkedIn breach, TeslaCrypt closing up shop, and a breakthrough in random number generation. The two also recap this week’s Source conference in Boston. Download: ThreatpostNewsWrapMay202016.mp3 Music by Chris Gonsalves...
Allfresco Community Edition: source code security analysis report
Several vulnerabilities were discovered in Alfresco Software 'Allfresco Community Edition' software: Утечка пользовательских данных между сессиями Использование XSL трансформации для исполнения произвольного кода Использование метода finalize Отсутствие верификации цифровой подписи исполняемых...
Juniper Updates ScreenOS: Hopes RNG/NSA Controversy Over
Juniper Networks hopes to remove any clouds of uncertainty that its networking gear might still have a backdoor that could allow the NSA or hackers to snoop on traffic running through its hardware. On Thursday, Juniper completed an update to the way its ScreenOS software handles encryption. Junip...
DEBIAN-CVE-2016-2858
QEMU, when built with the Pseudo Random Number Generator PRNG back-end support, allows local guest OS users to cause a denial of service process crash via an entropy request, which triggers arbitrary stack based allocation and memory corruption...
CVE-2016-2858
QEMU, when built with the Pseudo Random Number Generator PRNG back-end support, allows local guest OS users to cause a denial of service process crash via an entropy request, which triggers arbitrary stack based allocation and memory corruption...
UBUNTU-CVE-2016-2858
QEMU, when built with the Pseudo Random Number Generator PRNG back-end support, allows local guest OS users to cause a denial of service process crash via an entropy request, which triggers arbitrary stack based allocation and memory corruption...
QEMU Denial of Service Vulnerability (CNVD-2016-01541)
QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. QEMU has a security vulnerability. Due to an error in the program's handling of requests for random number generation entropy. A local attacker exploited the...
The vulnerability of Google Chrome browser allows a hacker to break the cryptographic protection mechanism.
The vulnerability of the Blink component in Google Chrome’s browser is due to the fact that the random number generator may not function properly. Exploiting this vulnerability allows a remote attacker to break the cryptographic security mechanism...
Sensio Labs Symfony Predictable Random Number Generation Vulnerability
Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A predictable random number generation vulnerability exist...
Google Chrome < 48.0.2564.82 Multiple Vulnerabilities
Binary data 9062.pasl...
PHP 7.0.x < 7.0.1 Multiple Vulnerabilities
Binary data 9064.prm...
Unspecified Vulnerability in Google Chrome Blink
Blink is the United States Google Google Inc. and Norway Opens Opera Software company jointly developed a set of browser layout engine rendering engine. A security vulnerability exists in Blink, as used in versions of Google Chrome prior to 48.0.2564.82, which stems from the program not ensuring...
Debian DSA-3456-1 : chromium-browser - security update
Several vulnerabilities were discovered in the chromium web browser. - CVE-2015-6792 An issue was found in the handling of MIDI files. - CVE-2016-1612 cloudfuzzer discovered a logic error related to receiver compatibility in the v8 JavaScript library. - CVE-2016-1613 A use-after-free issue was...
USN-2877-1: Oxide vulnerabilities
A bad cast was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash or execute arbitrary code with the privileges of the sandboxed render process. CVE-2016-1612 An issue was...
[SECURITY] [DSA 3456-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3456-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 27, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3456-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3456-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 27, 2016 https://www.debian.org/security/faq -...