PT-2016-4450

Name of the Vulnerable Software and Affected Versions EMC RSA Data Loss Prevention version 9.6 before SP2 P5 Description The issue allows remote attackers to conduct clickjacking attacks via web-site elements with crafted transparency or opacity. Recommendations For EMC RSA Data Loss Prevention...

PT-2016-4449

Name of the Vulnerable Software and Affected Versions EMC RSA Data Loss Prevention version 9.6 before SP2 P5 Description The issue allows remote authenticated users to bypass intended object access restrictions. This is achieved by modifying a parameter, although the specific parameter is not...

PT-2016-4447

Name of the Vulnerable Software and Affected Versions EMC RSA Data Loss Prevention version 9.6 before SP2 P5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For EMC RSA Data Loss Prevention versio...

PT-2016-4448

Name of the Vulnerable Software and Affected Versions EMC RSA Data Loss Prevention version 9.6 before SP2 P5 Description The issue allows remote authenticated users to obtain sensitive information by reading error messages. Recommendations For EMC RSA Data Loss Prevention version 9.6 before SP2 P...

CVE-2016-0893: Exposure of Sensitive Information to an Unauthorized Actor

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive information by reading error messages...

CVE-2016-0895: Improper Input Validation

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to conduct clickjacking attacks via web-site elements with crafted transparency or opacity...

Security Bypass Vulnerabilities in Multiple McAfee Products

McAfee Active Response MAR is a product of McAfee, Inc. and is a suite of endpoint threat detection and response solutions. McAfee Agent MA is a client component that provides secure communication between ePolicy Orchestrator antivirus management platform and managed products. McAfee Data Loss...

PT-2016-5792

Name of the Vulnerable Software and Affected Versions McAfee Active Response MAR versions prior to 1.1.0.161 McAfee Agent MA 5.x versions prior to 5.0.2 Hotfix 1110392 5.0.2.333 McAfee Data Exchange Layer 2.x DXL versions prior to 2.0.1.140.1 McAfee Data Loss Prevention Endpoint DLPe 9.3 versions...

The vulnerability of the Android operating system, which allows a hacker to bypass security measures and delete data

The vulnerability in the packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java file of the Setup Wizard component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass security...

Researchers Learning More About Petya Ransomware

Researchers are digging through samples of the Petya ransomware, and while they’ve learned some about its inner workings, they still haven’t mastered enough to come up with a decryptor. Petya is the latest twist on crypto-malware. It was found recently targeting companies in Germany in a spam...

OSIsoft PI SQL Data Access Server Input Validation Vulnerability

OVERVIEW OSIsoft has identified an input validation vulnerability in its own PI SQL Data Access Server. OSIsoft has produced a new version of PI SQL Data Access Server OLE DB 2016 1.5 to address this issue. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Affected versions of PI...

Debian Security Advisory DSA 3503-1 (linux - security update)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service, information leak or data loss. CVE-2013-4312 Tetsuo Handa discovered that users can use pipes queued on local Unix sockets to allocate an unfair share of kernel memory,...

Debian: Security Advisory (DSA-3503-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3503-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service, information leak or data loss. - CVE-2013-4312, CVE-2016-2847 Tetsuo Handa discovered that users can use pipes queued on local Unix sockets to allocate an unfair share of...

[SECURITY] [DSA 3503-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3503-1 [email protected] https://www.debian.org/security/ Ben Hutchings March 03, 2016 https://www.debian.org/security/faq -...

DSA-3503-1 linux - security update

Bulletin has no description...

DSA-3426-2 ctdb - regression update

Bulletin has no description...

Vulnerabilities in the Grub2 operating system loaders, which allow attackers to obtain confidential information or cause service failures

The multiple vulnerabilities of the Grub2 operating system’s loader are caused by a loss of precision for an integer. Exploiting these vulnerabilities allows a local attacker to bypass authentication procedures, obtain confidential information, or cause a service failure disk corruption by using...

The vulnerability of the SAP Mobile Platform, a platform for developing mobile applications, allows a perpetrator to obtain confidential information and bypass authentication procedures.

The vulnerability of SAP Mobile Platform’s serverlets for developing mobile applications is related to deficiencies in access control to files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to bypass authentication procedures, obtain confidential information, or...

Scientific Linux Security Update : glibc on SL7.x x86_64 (20151119)

It was discovered that, under certain circumstances, glibc's getaddrinfo function would send DNS queries to random file descriptors. An attacker could potentially use this flaw to send DNS queries to unintended recipients, resulting in information disclosure or data loss due to the application...