Trust Form < 2.0.1 - Authenticated Reflected Cross-Site Scripting (XSS)

The trust-form WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

StoreFront SAML Troubleshooting Guide

During the installation and configuration of the SAML functionality introduced with StoreFront 3.9, there are various items to be aware of when performing a successful configuration. Although there are other issues you might encounter, this document will try to provide direction to help resolve...

Cross site request forgery (csrf)

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

No Firewalls, No Problem for Google

SAN FRANCISCO—Google may have sent the tired castle analogy of network security’s soft center protected by a tough exterior out to pasture for good. On Tuesday at RSA Conference, Google shared the seven-year journey of its internal BeyondCorp rollout where it affirms trust based on what it knows...

CVE-2016-5937

IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

Google becomes its own Root Certificate Authority

In an effort to expand its certificate authority capabilities and build the "foundation of a more secure web," Google has finally launched its root certificate authority. In past few years, we have seen Google taking many steps to show its strong support for sites using HTTPS, like: Giving more...

CVE-2016-8317

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Unit Trust. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network...

CVE-2016-8317

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Unit Trust. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged attacker with network...

CVE-2016-8317

CVE-2016-8317 affects Oracle FLEXCUBE Investor Servicing (Unit Trust subcomponent) in Oracle Financial Services Applications. Affects supported versions 12.0.1, 12.0.2, 12.0.4, 12.1.0 and 12.3.0. The vulnerability enables a low-privilege user who has network access via HTTP to compromise the serv...

Google to Operate its Own Root CA

Google has inevitably become its own root Certificate Authority, allowing it to issue digital certificates for its products rather than rely on third party certs to validate Google properties. The move was announced Thursday, along with the creation of a new entity called Google Trust Services th...

Buffer overflow

Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR1027804...

CVE-2016-8439

Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR1027804...

CVE-2016-8439

Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR1027804...

CVE-2016-8439

CVE-2016-8439 is an Android vulnerability describing a possible buffer overflow in the trust zone access control API due to insufficient buffer size checking. The connected NVD entry lists affected software as Android kernel 3.18, with Android ID A-31625204, indicating the root cause lies in a bu...

CVE-2016-8439

Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR1027804...

princes-trust.org.uk XSS vulnerability

Vulnerable URL: https://www.princes-trust.org.uk/searchresults?searchParam=%27%22--%3E%3C/style%3E%3C/scRipt%3E%3CscRipt%3Ealert%27OPENBUGBOUNTY%27%3C/scRipt%3E Details: Description| Value ---|--- Patched:| Yes, at 17.04.2017 Latest check for patch:| 17.04.2017 00:41 GMT Vulnerability type:| XSS...

Update rollup for Visual Studio 2010 Tools for Office Runtime

Update rollup for Visual Studio 2010 Tools for Office Runtime Symptoms This update installs the Visual Studio 2010 Tools for Office Runtime. This is required to run Microsoft Office-based solutions that are built by using Microsoft Visual Studio 2010, Visual Studio 2012, and Visual Studio 2013...

Error: The Citrix Broker Service failed to validate a user's credentials on an XML service

WhenDomain Pass-throughis configured, the following is seen in the event log for the StoreFront: Log Name:Application Source: Citrix Broker Service Date: 2/8/2017 7:31:58 AM Event ID: 2100 Task Category: None Level: Warning Keywords: User: NETWORK SERVICE Computer: VDA name Description: The Citri...

Error: You Have not Chosen to Trust "Certificate Authority" from MAC Devices

SSL Trust issue on Mac...

CVE-2016-7271

The Secure Kernel Mode implementation in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to bypass the virtual trust level VTL protection mechanism via a crafted application, aka "Secure Kernel Mode Elevation of Privilege Vulnerability."...