Zimbra Collaboration Server < 7.2.6 / 8.0.6 Unspecified Vulnerability

The Zimbra Collaboration Server installed on the remote host is affected by an unspecified vulnerability. Note that the vendor has supplied patches for release versions 7.2.2, 7.2.3, 7.2.4, 7.2.5, 8.0.3, 8.0.4, and 8.05. Also note that Nessus does not identify patch levels for the above versions...

FBI Director James B. Comey RSA Conference Keynote

SAN FRANCISCO – Outgoing FBI Director Robert Mueller predicted to his successor James B. Comey that cybersecurity would dominate his 10-year tenure much the same way terrorism did Mueller’s. “After five months, he’s right,” Comey said today during his keynote address at RSA Conference 2014. Comey...

iOS 7 Bug Could Allow Background Monitoring

It’s only been a few days since Apple fixed the nasty certificate-validation “goto fail” vulnerability in iOS and OSX and now word comes that another bug, one that could allow an attacker to monitor keystrokes on iOS 7 devices without the user being any the wiser, also exists. The problem...

Zimbra Collaboration Server aspell.php dictionary Parameter XSS

The version of the Zimbra Collaboration Server spell check service installed on the remote host is affected by a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input to the 'dictionary' parameter of the 'aspell.php' script. An attacker may be able to...

Zimbra Collaboration Server Aspell Spell Check Service Detection

Binary data zimbraaspelldetect.nbin...

SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 Buffer Overflow

Exploit Title: SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 Remote Code Execution Vulnerability Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage: http://www.solidworks.com/sw/products/product-data-management/workgroup-pdm.htm Tested on: Windows 7...

Zimbra Collaboration Server Web Detection

Binary data zimbrawebdetect.nbin...

Zimbra Collaboration Server skin Parameter Traversal Local File Inclusion

The Zimbra Collaboration Server installed on the remote host is affected by a file disclosure vulnerability because it fails to properly sanitize user-supplied input to the 'skin' parameter of '/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz'. This vulnerability could...

Fedora Update for zarafa FEDORA-2014-1900

Check for the Version of zarafa OpenVAS Vulnerability Test Fedora Update for zarafa FEDORA-2014-1900 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for zarafa FEDORA-2014-1883

Check for the Version of zarafa OpenVAS Vulnerability Test Fedora Update for zarafa FEDORA-2014-1883 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 19 Update: zarafa-7.1.8-1.fc19

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...

[SECURITY] Fedora 20 Update: zarafa-7.1.8-1.fc20

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...

Cybersecurity Framework for U.S. Critical Infrastructure

Critical infrastructure operators have been delivered a cybersecurity framework by the U.S. government that paints broad strokes as to how to defend IT and SCADA networks in some of the country’s most sensitive industries such as energy, water and financial services. NIST today announced the...

Fedora Update for subversion FEDORA-2013-22575

Check for the Version of subversion OpenVAS Vulnerability Test Fedora Update for subversion FEDORA-2013-22575 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2013-4043

The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request...

Cross site request forgery (csrf)

The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request...

CVE-2013-4043

IBM SPSS Collaboration and Deployment Services has an unauthenticated file-disclosure vulnerability (CVE-2013-4043) affecting 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1. A remote attacker can issue an HTTP request to retrieve arbitrary server files. The IBM Security Bullet...

CVE-2013-4043

The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request...

CVE-2013-4043: Exposure of Sensitive Information to an Unauthorized Actor

The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request...

PT-2014-2733

Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.x before 4.2.1.3 IF3 IBM SPSS Collaboration and Deployment Services versions 5.x before 5.0 FP3 IBM SPSS Collaboration and Deployment Services versions 6.x before 6.0 IF1 Description Th...