5953 matches found
CVE-2012-3010
Vulnerability summary (CVE-2012-3010 / related CVEs) : The GE Intelligent Platforms Proficy Real-Time Information Portal’s Remote Interface Service (rifsrvd.exe), across versions 2.6–3.5 SP1, is affected. A long input data vector in the Remote Interface Service can trigger memory corruption, lead...
CVE-2012-3026: Improper Input Validation
rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service memory corruption and service crash or possibly execute arbitrary code via long input data, a different vulnerabili...
CVE-2012-3010: Improper Input Validation
rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service memory corruption and service crash or possibly execute arbitrary code via long input data, a different vulnerabili...
CVE-2012-3021: Improper Input Validation
rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service memory corruption and service crash or possibly execute arbitrary code via long input data, a different vulnerabili...
[SECURITY] Fedora 16 Update: mapserver-6.0.3-4.fc16
Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data...
Shift May Be Coming for Information Sharing on Attacks
ANAHEIM, CALIF.–The sharing of information on threats and attacks between government agencies and companies in the private sector has been tried numerous times and in many different ways over the last decade, with varying degrees of success. The need for information flowing in both directions...
Citadel Trojan Updates with Dynamic Config Mechanism that Streamlines Fraud Activity
The elusive authors of the Citadel Trojan have released a new version of their banking botnet malware and service. The latest version, the sixth since it debuted in January and dubbed Rain, includes a dynamic configuration mechanism that allows botmasters to inject malicious content to compromise...
Universal Man in the Browser Attacks
Researchers have discovered a new type of Man-in-the-Browser MItB attack that is Website independent, and does not target specific Websites, but instead collects data submitted to all sites. Trusteer have discovered a new Man in the Browser MitB scam that can collects data submitted to all websit...
New Strain of Man-in-the-Browser Malware Refines Data Sent to Attacker in Real Time
Hackers fond of man-in-the-browser MiTB attacks have brought efficiency to their work. New strains of MiTB malware have been discovered that are able to parse logs for the sensitive information hackers are targeting, rather than send massive unstructured logs back to the attacker’s command and...
Fedora Update for ganglia FEDORA-2012-10699
Check for the Version of ganglia OpenVAS Vulnerability Test Fedora Update for ganglia FEDORA-2012-10699 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
ZDI-12-148 : GE Proficy Real-Time Information Portal Remote Interface Service Remote Code Execution Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-148 : GE Proficy Real-Time Information Portal Remote Interface Service Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-148 August 22, 2012 - -- CVE ID: CVE-2012-0232 - -- CVSS: 9.4,...
GE Proficy Real-Time Information Portal Remote Interface Service Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of GE Proficy Real-Time Information Portal. Authentication is not required to exploit this vulnerability. This specific flaw exists within the Remote Interface Service rifsrvd.exe. The Remote Interfac...
ManageEngine OpUtils 6.0 - Persistent Cross-Site Scripting
Author: loneferret of Offensive Security Product: ManageEngine OpUtils Version: 6 Vendor Site: http://www.manageengine.com Software Download: http://www.manageengine.com/products/oputils/download.html Software Description: http://www.manageengine.com/products/oputils/oputils.html The toolset can ...
[SECURITY] Fedora 17 Update: ganglia-3.1.7-6.fc17
Ganglia is a scalable, real-time monitoring and execution environment with all execution requests and statistics expressed in an open well-defined XML format...
[SECURITY] Fedora 16 Update: ganglia-3.1.7-5.fc16
Ganglia is a scalable, real-time monitoring and execution environment with all execution requests and statistics expressed in an open well-defined XML format...
Syneto EMail Protection v1.5.1 - Multiple Web Vulnerabilities
Document Title: =============== Syneto EMail Protection v1.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=547 Release Date: ============= 2012-06-24 Vulnerability Laboratory ID VL-ID: ==================================...
Wassup < 1.8.3.1 - XSS
The WassUp Real Time Analytics WordPress plugin was affected by a XSS security vulnerability...
[SECURITY] Fedora 15 Update: python-tornado-2.2.1-1.fc15
Tornado is an open source version of the scalable, non-blocking web server and tools. The framework is distinct from most mainstream web server frameworks and certainly most Python frameworks because it is non-blocking and reasonably fast. Because it is non-blocking and uses epoll, it can handle...
[SECURITY] Fedora 17 Update: python-tornado-2.2.1-1.fc17
Tornado is an open source version of the scalable, non-blocking web server and tools. The framework is distinct from most mainstream web server frameworks and certainly most Python frameworks because it is non-blocking and reasonably fast. Because it is non-blocking and uses epoll, it can handle...
