CVE-2017-15090

The CVE concerns PowerDNS Recursor 4.0.0–4.0.6, where the DNSSEC validation component could incorrectly accept signatures as valid even when the signed data was not within the DNSKEY signer’s bailiwick. This could let a man-in-the-middle attacker modify DNS records by issuing a valid signature fo...

Threat Outbreak Alert RuleID31781: Email Messages Distributing Malicious Software on January 22, 2018

Medium Alert ID: 56512 First Published: 2018 January 22 17:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31781 may contain the following files: Name |...

openSUSE Security Update : xmltooling (openSUSE-2018-65)

This update for xmltooling fixes the following issues : - CVE-2018-0486: Fixed a security bug when xmltooling mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD bsc1075975 This upda...

Security update for xmltooling (important)

This update for xmltooling fixes the following issues: - CVE-2018-0486: Fixed a security bug when xmltooling mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD bsc1075975 This updat...

Threat Outbreak Alert RuleID31786: Email Messages Distributing Malicious Software on January 19, 2018

Medium Alert ID: 56506 First Published: 2018 January 19 20:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31786 may contain the following files: Name |...

Threat Outbreak Alert RuleID31784: Email Messages Distributing Malicious Software on January 19, 2018

Medium Alert ID: 56503 First Published: 2018 January 19 17:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31784 may contain the following files: Name |...

Threat Outbreak Alert RuleID31767: Email Messages Distributing Malicious Software on January 19, 2018

Medium Alert ID: 56501 First Published: 2018 January 19 17:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31767 may contain the following files: Name |...

SUSE-SU-2018:0140-1 Security update for xmltooling

This update for xmltooling fixes the following issues: - CVE-2018-0486: Fixed a security bug when xmltooling mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD bsc1075975...

Threat Outbreak Alert RuleID31780: Email Messages Distributing Malicious Software on January 18, 2018

Medium Alert ID: 56495 First Published: 2018 January 18 18:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31780 may contain the following files: Name |...

Threat Outbreak Alert RuleID31757: Email Messages Distributing Malicious Software on January 18, 2018

Medium Alert ID: 56492 First Published: 2018 January 18 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31757 may contain the following files: Name |...

Threat Outbreak Alert RuleID31753: Email Messages Distributing Malicious Software on January 17, 2018

Medium Alert ID: 56488 First Published: 2018 January 17 18:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31753 may contain the following files: Name |...

Threat Outbreak Alert RuleID31747: Email Messages Distributing Malicious Software on January 17, 2018

Medium Alert ID: 56486 First Published: 2018 January 17 18:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31747 may contain the following files: Name |...

Threat Outbreak Alert RuleID31741: Email Messages Distributing Malicious Software on January 16, 2018

Medium Alert ID: 56474 First Published: 2018 January 16 15:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31741 may contain the following files: Name |...

Threat Outbreak Alert RuleID31745: Email Messages Distributing Malicious Software on January 16, 2018

Medium Alert ID: 56473 First Published: 2018 January 16 15:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31745 may contain the following files: Name |...

CVE-2018-0486

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD...

Information disclosure

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD...

CVE-2018-0486

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD...

CVE-2018-0486

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD...

UBUNTU-CVE-2018-0486

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD...

CVE-2018-0486

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD...