PT-2016-2333

Name of the Vulnerable Software and Affected Versions ABB PCM600 versions prior to 2.7 Description The issue is related to the improper storage of OPC Server IEC61850 passwords in temporary circumstances, allowing local users to obtain sensitive information. The vulnerability is associated with t...

PT-2016-2332

Name of the Vulnerable Software and Affected Versions ABB PCM600 versions prior to 2.7 Description The issue is related to the improper storage of the main application password after a password change, allowing local users to obtain sensitive information. The password is stored in an unencrypted...

Vulnerability of the Mac OS X operating system and the iOS operating system, allowing attackers to obtain confidential information

The vulnerability of the MapKit component in the Mac OS X and iOS operating systems is related to the lack of use of the HTTPS protocol for links. Exploiting this vulnerability can allow a malicious actor to obtain confidential information by monitoring network traffic remotely...

CVE-2016-1842

MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...

Apple WatchOS Denial of Service Vulnerability (CNVD-2016-02948)

Apple watchOS is a smartwatch operating system developed by Apple. A denial of service vulnerability exists in Apple watchOS versions 2.0 and 2.1. The failure to encrypt the alarm function input allows an attacker to save text by entering a malicious loop...

The vulnerability of the Squid proxy server allows a hacker to cause a service failure.

The vulnerability of the FwdState::connectedToPeer method FwdState.cc in the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause a service failure application termination by using an unencrypted HTTP message...

KNOX 2.3 Clipboard Data Disclosure

Subject: CVE-2016-3996KNOX clipboard data disclosure KNOX 1.0 - KNOX 2.3 / Android Vulnerability Description ========================= The vulnerability allows disclosure of Clipboard data of Samsung KNOX 1.0 and 2.3 containers. On KNOX-enabled devices there exists a proprietary service called...

Ecava IntegraXor Transfer Unencrypted Vulnerability

Ecava IntegraXor is a set of Web-based tools for creating and running HMI interfaces for SCADA systems. A transmit unencrypted vulnerability exists in Ecava IntegraXor prior to version 5.0 build 4522, which originates when the HMI web server transmits unencrypted data. A remote attacker could...

CBS Sports App Transmitted Data Unencrypted

CBS recently fixed a vulnerability in its popular Sports application that could have exposed users to man-in-the-middle attacks and inadvertently leaked personal data. According to researchers, upon registration, users’ names, email addresses, account passwords, dates of birth, and zip codes were...

CVE-2016-2166

The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...

CVE-2016-2166

The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...

UBUNTU-CVE-2016-2166

The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...

CVE-2016-2166

The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...

CVE-2016-2166

The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...

Red Hat CloudForms Management Engine Information Disclosure Vulnerability

Red Hat CloudForms Management Engine CFME is a management engine for IaaS Infrastructure as a Service cloud service solutions from Red Hat, Inc. A security vulnerability exists in Red Hat CFME versions 5.4.4 CloudForms version 3.2 and 5.5.0 CloudForms version 4.0, which stems from the program...

PT-2016-5042 · Apache +1 · Apache Qpid Proton +1

Name of the Vulnerable Software and Affected Versions: Apache Qpid Proton versions prior to 0.12.1 Description: The issue is related to the improper use of an unencrypted connection for an amqps URI scheme when SSL support is unavailable in certain classes. This might allow attackers to obtain...

CVE-2015-7502: Exposure of Sensitive Information to an Unauthorized Actor

Red Hat CloudForms 3.2 Management Engine CFME 5.4.4 and CloudForms 4.0 Management Engine CFME 5.5.0 do not properly encrypt data in the backend PostgreSQL database, which might allow local users to obtain sensitive data and consequently gain privileges by leveraging access to 1 database exports o...

Insecure Default Configuration

Overview Affected versions of airbrake default to sending environment variables over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible for them to capture and read these environment variables, which may result in leaking sensitive...

[SECURITY] Fedora 24 Update: krb5-1.14.1-3.fc24

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

Apache Qpid Proton python API plaintext transfer vulnerability

Apache Qpid is an object-oriented messaging middleware developed by the Apache Software Foundation. The Proton python API is an API that supports the python language and implements the AMQP 1.0 protocol. A security vulnerability exists in the Apache Qpid Proton python API versions 0.9 through...