FileMaker Pro vulnerable to cross-site scripting

Overview FileMaker Pro contains an "Instant Web Publishing" function. When this function is enabled, FileMaker Pro is vulnerable to cross-scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Upgrade the software Upgrade to the latest version according to the...

DSA-2678-1 mesa - several

Bulletin has no description...

DSA-2674-1 libxv - several

Bulletin has no description...

DSA-2687-1 libfs - several

Bulletin has no description...

Upgrade bundled Tomcat to 6.0.37

Customer related a security flaw in Tomcat 6.0.35 and requests that we upgrade the bundled version...

RedHat Update for openswan RHSA-2013:0827-01

Check for the Version of openswan OpenVAS Vulnerability Test RedHat Update for openswan RHSA-2013:0827-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

DSA-2651-1 smokeping - cross-site scripting vulnerability

Bulletin has no description...

DSA-2644-1 wireshark - several

Bulletin has no description...

DSA-2623-1 openconnect - buffer overflow

Bulletin has no description...

DSA-2621-1 openssl - several vulnerabilities

Bulletin has no description...

DSA-2620-1 rails - several

Bulletin has no description...

DSA-2619-1 xen-qemu-dm-4.0 - buffer overflow

Bulletin has no description...

Outdated version of WordPress leads to MasterCard Hack

On tip of a readers, yesterday we came across a new MasterCard hack, performed by Syrian Electronic Army. Hackers was able to breach MasterCard Blog https://insights.mastercard.com and make a new blog post on the website with title "Hacked By Syrian Electronic Army" on January 5, 2013. For now...

TURKTRUST Officials Say No Evidence of Malice in Certificate Incident

A week after the disclosure of the existence of a fraudulent certificate for Google domains that resulted from the mistaken issuance of a subordinate certificate by a Turkish certificate authority, officials at TURKTRUST are continuing to defend their actions in response to the incident, and say...

DSA-2598-1 weechat - several

Bulletin has no description...

SOL14054 - CRIME vulnerability via TLS 1.2 protocol CVE-2012-4929

Vulnerability Recommended Actions To eliminate this vulnerability, perform one of the following actions: Upgrade to a software version that is listed in the Versions known to be Not Vulnerable column of the table. Upgrade your client browser to a non-vulnerable version. Supplemental Information...

Mozilla Firefox Multiple Vulnerabilities-02 November12 (Mac OS X)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvuln02nov12macosx.nasl 5988 2017-04-20 09:02:29Z teissa $ Mozilla Firefox Multiple Vulnerabilities-02 November12 Mac OS X Authors: Rachana Shetty Copyright:...

FreeBSD Ports: rt40

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

DSA-2575-1 tiff - heap overflow

Bulletin has no description...

Windows website loophole allow anyone to get WIndows 8 in just $14.99

Windows 8 launched in 37 languages and 140 worldwide markets, as the tech giant unveiled the new version of its computer operating system. The OS is now available in over 30 certified devices, and a broad selection of local apps are already available in the onboard Windows Store. It is also...