Wonderware Information Server Multiple Vulnerabilities

Overview ICS-CERT originally released Advisory “ICSA-12-062-01PInvensys Wonderware Information Server Multiple Vulnerabilities” on the US-CERT secure portal on March 02, 2012. This web page release was delayed to allow users time to download and install the update. Independent security researche...

Resilient Security Requires Creativity and Intelligence

Try to dampen your innate cynicism for one second, forget the source of this next comment, and absorb it: “We need resilient defenses.” Dr. Steve King uttered those words at a small security event in Boston last week. Four simple words you’ve heard before that today make so much sense. King is th...

Ubuntu Update for glance USN-1626-2

Ubuntu Update for Linux kernel vulnerabilities USN-1626-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN16262.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for glance USN-1626-2 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1626-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.10 : glance vulnerability (USN-1626-2)

USN-1626-1 fixed vulnerabilities in the v1 API of Glance. This update provides the corresponding updates for the v2 API. Gabe Westmaas discovered that Glance did not always properly enforce access controls when deleting images. An authenticated user could delete arbitrary images by using the v1 A...

Ubuntu: Security Advisory (USN-1626-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for glance USN-1626-1

Ubuntu Update for Linux kernel vulnerabilities USN-1626-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16261.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for glance USN-1626-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

USN-1626-1: Glance vulnerability

Gabe Westmaas discovered that Glance did not always properly enforce access controls when deleting images. An authenticated user could delete arbitrary images by using the v1 API under certain circumstances...

DHS Warns ICS, SCADA Owners About Increase in Malicious Activity

An alert from the Department of Homeland Security late last week urges private- and public-sector industrial control system ICS owners to be proactive in auditing the security, particularly, authentication controls of their systems. The alert is in response to a growing concern over the number of...

TIBCO Security Advisory: October 23, 2012 - TIBCOFormvine®

TIBCO Formvine®vulnerability Original release date: Oct 23, 2012 Last revised: -- CVE-2012-5302 Source: TIBCO SoftwareInc. TIBCO Formvine vulnerability Original release date: Oct 23, 2012 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO Formvine versions 3.1.0 through 3.2.0 The...

HP/H3C and Huawei networking equipment h3c-user snmp vulnerability

Overview HP/H3C and Huawei networking equipment contains a vulnerability which could allow an attacker to access administrative functions of the device using systems network management protocol SNMP requests. Description According to the researcher's report.:"HP/H3C and Huawei networking equipmen...

HCView WriteAV Crash Proof Of Concept

!/usr/bin/perl Hardcoreview WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira Vendor URI: http://sourceforge.net/projects/hardcoreview/ Vendor Description: Image browser. Designed and created for profesional and amature watching image files. All kind of image files ; . Support .jpg,...

FDA Urged to More Rigorously Evaluate Medical Devices' Security Risks

Lawmakers are urging the Food and Drug Administration to more thoroughly vet certain implantable medical devices for security, not just safety, risks. They include life-saving defibrillators, insulin pumps and pacemakers, which have been shown in recent years to be vulnerable to remote attacks...

IBM WebSphere Application Server 6.1 < Fix Pack 45 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 45 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - An error exists related to 'Application Snoop Servlet' and missing access controls. This error can allow sensitive information...

CVE-2012-3741

CVE-2012-3741 affects Apple iOS prior to version 6, where the Restrictions (Parental Controls) feature may fail to require Apple ID authentication after a Disable Restrictions action, allowing a local user to complete purchases without password verification. The issue is described in the CVE entr...

CVE-2012-3741

The Restrictions aka Parental Controls implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Restrictions action, which allows local users to bypass an intended Apple ID authentication step via an app that performs purchase transactions...

Microsoft FixIt Will Address IE Zero-Day Vulnerability

With Internet Explorer users still exposed to as many as four active exploits of a zero-day vulnerability in the browser, Microsoft Tuesday night said it will release a FixIt in the next couple of days that will address the issue. A FixIt is an automated tool provided by Microsoft that diagnoses...

CVE-2012-3034

WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified methods in ActiveX controls...

Default credentials

WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified methods in ActiveX controls...

CVE-2012-3034

The CVE-2012-3034 issue affects Siemens WinCC WebNavigator (used with SIMATIC PCS7) where crafted parameters to certain ActiveX controls allow remote attackers to obtain a user name and password. The root cause involves unsafe handling within ActiveX methods exposed by WebNavigator, enabling cred...