SUSE-SU-2016:1966-1 Security update for several openstack-components

This update provides the latest code from OpenStack Liberty for openstack-designate, -ironic, -neutron-vpnaas, -nova-docker, -sahara, -tempest and -trove. Additionally the following security issue has been fixed: openstack-ironic: - Mask password on agent lookup according to policy bsc984802,...

Xero Accounting Software - Exported components, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Xero Accounting Software published at the 'play' market has multiple vulnerabilities...

Google Keep - Certificates or keys found, Exported ContentProvider, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Google Keep published at the 'play' market has multiple vulnerabilities...

International Components for Unicode/C++ Denial of Service Vulnerability

International Components for Unicode ICU is a set of libraries for the C/C++ and Java programming languages to manipulate Unicode data, and an open source project to support the internationalization of software. The 'ulocacceptLanguageFromHTTP' function in the common/uloc.cpp file of Internationa...

java security update

CentOS Errata and Security Advisory CESA-2016:1504 An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Pou - Dangerous filesystem permissions, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Pou published at the 'play' market has multiple vulnerabilities...

انتخاباتي - Exported components, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application انتخاباتي published at the 'play' market has multiple vulnerabilities...

Кубань Кредит (Интернет банк) - Certificates or keys found, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Кубань Кредит Интернет банк published at the 'play' market has multiple vulnerabilities...

Google Keyboard - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Google Keyboard published at the 'play' market has multiple vulnerabilities...

CVE-2016-3586

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3510...

CVE-2016-3510

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586...

CVE-2016-3510

CVE-2016-3510 is a remote-code-execution vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, 12.2.1.0) via deserialization in the WLS Core Components. An unauthenticated attacker can exploit a crafted serialized object (MarshalledObject) sent to the WebLogic T3 i...

CVE-2016-5459

Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect integrity via vectors related to iHelp...

CVE-2016-3586

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3510...

CVE-2016-3510

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586...

Fake GPS location - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Fake GPS location published at the 'play' market has multiple vulnerabilities...

Core Tor Contributor Leaves Project; Shutting Down Important Tor Nodes

Another blow to the Tor Project: One of the Tor Project's earliest contributors has decided to quit the project and shut down all of the important Tor nodes under his administration. Lucky Green was part of the Tor Project before the anonymity network was known as TOR. He probably ran one of the...

The vulnerability of the International Components for Unicode library allows a attacker to trigger a service failure or cause other adverse effects.

The vulnerability of the collator implementation i18n/ucol.cpp in the International Components for Unicode library is related to resource management errors. Exploiting this vulnerability may allow a malicious actor to cause service failures or other effects through a specially crafted sequence of...

Ingress - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Ingress published at the 'play' market has multiple vulnerabilities...