Security Bulletin: Multiple vulnerabilities affect Java Server Faces (JSF) used by WebSphere Application Server (CVE-2017-1583, CVE-2011-4343)

Summary There are two potential infomation disclosure vulnerabilities that affects the Java Server Faces JSF component used by WebSphere Application Server. Vulnerability Details CVEID: CVE-2017-1583 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to obtain sensitive...

MGASA-2018-0269 Updated mariadb packages fix security vulnerabilities

Updated mariadb packages fix security vulnerabilities: Vulnerability in the MariaDB Server component of MariaDB subcomponent: Server: Partition. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful...

Huawei Patches Four Server Bugs Rated High Severity

Huawei Technologies warned customers of four vulnerabilities rated high that impact 20 of its server models. Patches are available for each of the bugs that range from an authentication bypass vulnerability, privilege escalation vulnerability and two JavaScript Object Notation JSON injection...

MGASA-2018-0259 Updated mariadb packages fix security vulnerabilities

Updated mariadb packages fix security vulnerabilities: Vulnerability in the MariaDB Server component of MariaDB subcomponent: Server: Replication. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MariaDB Server executes to compromise MariaD...

Poor Security Exposes Medical Data to Cybercriminals

ARCHIVED STORY McAfee Researchers Find Poor Security Exposes Medical Data to Cybercriminals By Christiaan Beek · March 11, 2018 The nonperishable nature of medical data makes an irresistible target for cybercriminals. The art of hacking requires significant time and effort, encouraging experience...

USN-3586-1 isc-dhcp vulnerabilities

Konstantin Orekhov discovered that the DHCP server incorrectly handled a large number of concurrent TCP sessions. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2016-2774 It was discovered that the...

GoAhead CGI Scanner

A GoAhead scanning tool is designed to gather information from servers. Such scans might indicate an attempt to disclose sensitive information. Remote attackers can use the GoAhead vulnerabilities on a target server...

Amazon Linux AMI : mysql55 (ALAS-2017-927)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized...

Amazon Linux AMI : mysql56 (ALAS-2017-888)

Server: Charsets unspecified vulnerability CPU Jul 2017 : Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows...

CVE-2016-9461

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on a WebDAV COPY action. This allowed an authenticated attacker with access to a read-only share to...

Vulnerability of the Microsoft Office package, the Microsoft SharePoint Server corporate application package, the Word Viewer software for reading doc files, the Microsoft Office Web Apps package, the Microsoft Word text editor, the Microsoft Excel spreadsheet editor, and the Microsoft Office Compatibility Pack, which allows a perpetrator to cause service interruptions or obtain confidential information from process memory.

The vulnerabilities of the Microsoft Office suite, the Microsoft SharePoint Server enterprise application suite, the Word Viewer document viewer software, the Microsoft Office Web Apps suite, the Microsoft Word text editor, the Microsoft Excel spreadsheet editor, and the Microsoft Office...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality and integrity of protected information

The ltsp-server package for the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities can lead to violations of privacy and the integrity of protected information. These vulnerabilities can be exploited by malicious individuals...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality of protected information

The multiple vulnerabilities in the xorg-server package of the Debian GNU/Linux operating system may lead to a violation of the confidentiality of protected information...

MariaDB Server 10.1.x < 10.1.11 Multiple Vulnerabilities

Binary data 9292.prm...

Meet The Cryptoworm, The Future of Ransomware

Ransomware is evolving and soon will share the same deadly efficiencies as notorious worms of the past, such as Conficker and SQL Slammer. In fact, according to security researchers at Cisco Talos, today’s newest ransomware, SamSam, is a harbinger of a new wave of more malicious, tenacious and...

Cross-Site Scripting Scanning Attempt (CVE-2015-4661; CVE-2019-16385; CVE-2019-9167; CVE-2020-10946; CVE-2020-12261; CVE-2020-13228; CVE-2020-13627; CVE-2020-13628; CVE-2020-14953; CVE-2021-21801; CVE-2021-25080; CVE-2022-25305; CVE-2022-28102)

Remote attackers use Cross-Site Scripting scanning in order to locate potential Cross-Site Scripting vulnerabilities on a target server, which could be later used for attacks...

SUSE-SU-2015:2088-1 Security update for LibVNCServer

The LibVNCServer package was updated to fix the following security issues: - bsc897031: fix several security issues: CVE-2014-6051: Integer overflow in MallocFrameBuffer on client side. CVE-2014-6052: Lack of malloc return value checking on client side. CVE-2014-6053: Server crash on a very large...

Microsoft Lync Server Multiple Vulnerabilities (3089952)

This host is missing an important security update according to Microsoft Bulletin MS15-104. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Double the bang for your buck with Acunetix Vulnerability Scanner

Acunetix have announced that they are extending their current free offering of the network security scan, part of their cloud-based web and network vulnerability scanner. Those signing up for a trial of the online version of Acunetix vulnerability scanner will now be able to scan their perimeter...

TR-0 6 9 auto configuration servers multiple vulnerabilities-vulnerability warning-the black bar safety net

Affected system: Broadband Forum TR-0 6 9 Description: -------------------------------------------------------------------------------- CVECAN ID: CVE-2 0 1 4-2 8 4 0,CVE-2 0 1 4-4 9 5 6,THE CVE-2 0 1 4-4 9 1 6,THE CVE-2 0 1 4-4 9 1 7,CVE-2 0 1 4-4 9 1 8,THE CVE-2 0 1 4-4 9 5 7 TR-0 6 9 is a DSL...