4189 matches found
Vulnerability in HTC website allow attacker to hijack accounts
Thamatam Deepak Mr.47™ reported a Cross site scripting XSS Vulnerability and cookie handling in HTC website, that allow an attacker to HTC website hijack accounts. Mr. Deepak is a 16 years old whitehat hacker, listed in Apple Hall of Fame with 'The Hacker News' researcher Mohit Kumar this month...
Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 update
JBoss Enterprise Application Platform 6.0.1, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...
Important: Red Hat Security Advisory: JBoss Enterprise BRMS Platform 5.3.0 security update
An update for JBoss Enterprise BRMS Platform 5.3.0 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
Wonderware Information Server Multiple Vulnerabilities
Overview ICS-CERT originally released Advisory “ICSA-12-062-01PInvensys Wonderware Information Server Multiple Vulnerabilities” on the US-CERT secure portal on March 02, 2012. This web page release was delayed to allow users time to download and install the update. Independent security researche...
Resilient Security Requires Creativity and Intelligence
Try to dampen your innate cynicism for one second, forget the source of this next comment, and absorb it: “We need resilient defenses.” Dr. Steve King uttered those words at a small security event in Boston last week. Four simple words you’ve heard before that today make so much sense. King is th...
Ubuntu Update for glance USN-1626-2
Ubuntu Update for Linux kernel vulnerabilities USN-1626-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN16262.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for glance USN-1626-2 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...
Ubuntu: Security Advisory (USN-1626-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 12.10 : glance vulnerability (USN-1626-2)
USN-1626-1 fixed vulnerabilities in the v1 API of Glance. This update provides the corresponding updates for the v2 API. Gabe Westmaas discovered that Glance did not always properly enforce access controls when deleting images. An authenticated user could delete arbitrary images by using the v1 A...
Ubuntu: Security Advisory (USN-1626-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for glance USN-1626-1
Ubuntu Update for Linux kernel vulnerabilities USN-1626-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16261.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for glance USN-1626-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...
USN-1626-1: Glance vulnerability
Gabe Westmaas discovered that Glance did not always properly enforce access controls when deleting images. An authenticated user could delete arbitrary images by using the v1 API under certain circumstances...
TIBCO Security Advisory: October 23, 2012 - TIBCOFormvine®
TIBCO Formvine®vulnerability Original release date: Oct 23, 2012 Last revised: -- CVE-2012-5302 Source: TIBCO SoftwareInc. TIBCO Formvine vulnerability Original release date: Oct 23, 2012 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO Formvine versions 3.1.0 through 3.2.0 The...
HP/H3C and Huawei networking equipment h3c-user snmp vulnerability
Overview HP/H3C and Huawei networking equipment contains a vulnerability which could allow an attacker to access administrative functions of the device using systems network management protocol SNMP requests. Description According to the researcher's report.:"HP/H3C and Huawei networking equipmen...
FDA Urged to More Rigorously Evaluate Medical Devices' Security Risks
Lawmakers are urging the Food and Drug Administration to more thoroughly vet certain implantable medical devices for security, not just safety, risks. They include life-saving defibrillators, insulin pumps and pacemakers, which have been shown in recent years to be vulnerable to remote attacks...
IBM WebSphere Application Server 6.1 < Fix Pack 45 Multiple Vulnerabilities
IBM WebSphere Application Server 6.1 before Fix Pack 45 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - An error exists related to 'Application Snoop Servlet' and missing access controls. This error can allow sensitive information...
Microsoft Windows Print Spooler CVE-2012-1851 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the Print Spooler service. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges, which can result in the complete compromise of affected computers. Technologies Affected...
IBM WebSphere Application Server 8.0 < Fix Pack 4 Multiple Vulnerabilities
IBM WebSphere Application Server 8.0 before Fix Pack 4 appears to be running on the remote host and is potentially affected by the following vulnerabilities : - An input validation error exists related to the 'Eclipse Help System' that can allow arbitrary redirect responses to HTTP requests...
Ubuntu Update for nova USN-1326-1
Ubuntu Update for Linux kernel vulnerabilities USN-1326-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13261.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for nova USN-1326-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...
mod_cluster: malicious worker nodes can register on any vhost
modcluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from ...
mod_cluster: malicious worker nodes can register on any vhost
modcluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from ...