468 matches found
MGASA-2013-0300 Updated vino packages fix CVE-2013-5745
Updated vino package fixes security vulnerability: The vinoserverclientdatapending function in vino-server.c in GNOME Vino 3.7.3 and earlier, when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote...
Bloomberg Leaks Private Messages from Data-Mining Project
A news report says the beleaguered Bloomberg financial data and news service accidentally posted online more than 10,000 private messages between traders and clients at some of the world’s largest banks. The breaches, said to be part of a former employee’s data mining project, took place in 2009...
Client Data Leakage Detection (SSN) (deprecated)
Binary data 7061.pasl...
Debian: Security Advisory (DSA-2387-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Anonymous Hacks Security Think Tank STRATFOR
Hackers with Anonymous have struck a well-known security and intelligence think tank based in Texas and made off with some 200 GB of credit card data and other information. Members of the loosely-affiliated collective announced the attack on STRATFOR on Twitter. Among the items reportedly pilfere...
DEBIAN-CVE-2011-4896
Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port...
CVE-2011-1740
EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain...
CVE-2011-3211
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client...
Morgan Stanley Smith Barney Breach Loses Information of 34,000
Retail brokerage Morgan Stanley Smith Barney MSSB has notified 34,000 investment clients that some of their data has been lost, including their names, addresses, social security numbers, tax identification numbers and investment income from 2010, according to a report on the Dow Jones newswires...
Box Client Detection
Binary data 5948.prm...
VMware SpringSource Spring Framework class.classloader Remote Code Execution (CVE-2010-1622)
The vulnerability is caused due to an error in the mechanism used to update the properties of an object with client provided data. A vulnerability has been reported in Spring Framework. A vulnerability has been reported in Spring Framework, which can allow attackers to compromise a vulnerable...
FTP Client Data Leakage
Binary data 5923.prm...
FTP Client Data Leakage
Binary data 5918.prm...
Client Data Leakage Detection (SSN)
Binary data 5822.prm...
Client Data Leakage Detection via FTP (SSN)
Binary data 5915.prm...
Social Security Number Detection (Client)
Binary data 5821.prm...
Race condition
Multiple race conditions in ssl/t1lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to 1 the T...
Law Firms See Uptick As Cybercrime Targets
Cyber-criminals see law firms as particularly lucrative targets that can earn them hundreds of thousands of dollars per heist. Cyberspies also attack attorney firms to steal client data that can be sold or used to learn the details of future litigation. Read the full article. SF Chronicle...
Generic Botnet Client Detection
Binary data 4400.prm...
Design/Logic Flaw
Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04-00 and 04-01, might allow remote attackers to cause a denial of service agent process crash via invalid data from clients other than Cosminexus Manager...