3728 matches found
CVE-2013-6986
The CVE-2013-6986 issue affects ZippyYum Subway CA Kiosk iOS app (3.4). The vulnerability stems from cleartext storage of sensitive data in SQLite cache files (Cache.db / Cache.db-wal) under ../Caches/com.ZippyYum.SubwayOC/, allowing local attackers with access to read unencrypted data. Exposed e...
Microsoft Digital Certificates Security Advisory (2916652)
This host is missing an important security update according to Microsoft advisory 2916652. OpenVAS Vulnerability Test $Id: gbmicrosoftsecurityadvisory2916652.nasl 5347 2017-02-19 09:15:55Z cfi $ Microsoft Digital Certificates Security Advisory 2916652 Authors: Shashi Kiran N Copyright: Copyright ...
Microsoft Digital Certificates Security Advisory (2916652)
This host is missing an important security update according to Microsoft advisory 2916652. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2013-5968
Cross-site scripting XSS vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " double quote character...
Cross site scripting
Cross-site scripting XSS vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " double quote character...
CVE-2013-5968
CVE-2013-5968 is a cross-site scripting (XSS) vulnerability affecting CA SiteMinder 12.0–12.51 and SiteMinder 6 Web Agents. The issue allows remote attackers to inject arbitrary script or HTML via vectors involving the double-quote character. The NVD entry lists a Medium severity (CVSSv2 base sco...
CVE-2013-5968
Cross-site scripting XSS vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " double quote character...
CA SiteMinder crossite scripting
No description provided...
CA20131024-01: Security Notice for CA SiteMinder
-----BEGIN PGP SIGNED MESSAGE----- CA20131024-01: Security Notice for CA SiteMinder Issued: October 24, 2013 CA Technologies Support is alerting customers to a potential vulnerability in CA SiteMinder that can be mitigated by utilizing existing product functionality. The vulnerability,...
Mandriva Linux Security Advisory : nss (MDVSA-2013:257)
A vulnerability has been discovered and corrected in mozilla NSS : Mozilla Network Security Services NSS before 3.15.2 does not ensure that data structures are initialized before read operations, which allow remote attackers to cause a denial of service or possibly have unspecified other impact v...
CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'CA BrightStor ARCserve Tape Engine 0x...
Amazon Linux AMI : ca-certificates (ALAS-2011-03)
This update includes the latest updates to the root Certificate Authority list from Mozilla. It was found that a Certificate Authority CA issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the ca-certificates package, rendering any HTTPS certificates signed ...
Computer Associates ARCserve Backup LDBserver Remote Code Execution Vulnerability
The version of CA ARCserve Backup installed in the remote hosted is affected by a remote code execution vulnerability. A remote attacker can exploit this vulnerability by providing a specially crafted handlet argument to an RPC endpoint for the LDBserver service. C Tenable Network Security, Inc...
Google, Mozilla Considering Limiting Certificate Validity to 60 Months
In the wake of a parade of problems with certificate authorities and attackers using stolen digital certificates, both Google and Mozilla are poised to enforce new rules in their browsers for how long end-entity certificates should be trusted. The changes will begin taking effect at the beginning...
Microsoft discontinues MD5 crypto for digital certificates to improve RDP Authentication
This week Microsoft has released several advisories to help their users update from weak crypto. Microsoft is beginning the process of discontinuing support for digital certificates that use the MD5 hashing algorithm and to improve the network-level authentication for the Remote Desktop Protocol...
CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Remote Vulnerabilities
According to the version of rxRPC.dll installed on the remote host, the Computer Associates product is affected by multiple vulnerabilities that could allow a remote attacker to execute arbitrary code on the host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69317;...
CA ARCserve Backup for Laptops and Desktops Server, CA Protection Suite, and CA Desktop Management Suite Integer Underflow
According to the version of rxRPC.dll installed on the remote host, the Computer Associates product is affected by an integer underflow vulnerability that could allow a remote attacker to cause the LGServer service to crash or execute arbitrary code. C Tenable Network Security, Inc...
CVE-2013-2630
Cross-site scripting XSS vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...
Cross site scripting
Cross-site scripting XSS vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...