Oracle July 2013 Critical Patch Update patches 89 Flaws

It may not be the highest priority patch among the 89 released by Oracle yesterday in its July Critical Patch Update CPU, but a fix for an Outside In Technology vulnerability in Oracle’s Fusion middleware merits some extra attention. Oracle provides the technology in several of its products in...

Barracuda LB, SVF, WAF & WEF - Multiple Vulnerabilities

Document Title: =============== Barracuda LB, SVF, WAF & WEF - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=727 Note: The issue was part of the official Barracuda Networks Bug Bounty Program. Release Date: =============...

Barracuda LB, SVF, WAF & WEF - Multiple Vulnerabilities

Document Title: =============== Barracuda LB, SVF, WAF & WEF - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=727 Note: The issue was part of the official Barracuda Networks Bug Bounty Program. Release Date: =============...

McAfee Data Loss Prevention - Multiple Information Disclosure Vulnerabilities

McAfee Data Loss Prevention - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/61033/info McAfee Data Loss Prevention is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to disclose contents of arbitrary files an...

McAfee Data Loss Prevention - Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/61033/info McAfee Data Loss Prevention is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to disclose contents of arbitrary files and obtain sensitive information. This may aid in launching further attacks...

Megaupload files deleted by Dutch hosting company LeaseWeb

Kim Dotcom today said on Twitter that Megaupload user data in Europe has been irreversibly lost because it was deleted by a Dutch hosting company called LeaseWeb. LeaseWeb is based in Germany and has subsidiaries also in the United States, the company. LeaseWeb has 60,000 servers under its...

Megaupload files deleted by Dutch hosting company LeaseWeb

Kim Dotcom today said on Twitter that Megaupload user data in Europe has been irreversibly lost because it was deleted by a Dutch hosting company called LeaseWeb. LeaseWeb is based in Germany and has subsidiaries also in the United States, the company. LeaseWeb has 60,000 servers under its...

CVE-2013-2140

The dispatchdiscardio function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service data loss via filesystem write operations on a read-only disk that supports the 1 BLKIFOPDISCARD aka discard...

ICS-CERT Tips for Critical Infrastructure to Avoid Shamoon

Most publicly known malware attacks are disruptive in nature, for example causing the interruption of online banking services or taking websites temporarily offline. Few attacks cause actual physical damage to computers where hard drives are damaged and data lost or destroyed. The Shamoon virus i...

Corel Quattro Pro X6 Standard Edition NULL Pointer Dereference

Advisory ID: HTB23112 Product: Corel Quattro Pro X6 Standard Edition Vendor: Corel Corporation Vulnerable Versions: 16.0.0.388, other versions may be also affected Tested Version: 16.0.0.388 on Windows 7 SP1 32 bits Vendor Notification: August 27, 2012 Public Disclosure: March 7, 2013 Vulnerabili...

Corel WordPerfect X6 Standard Edition Untrusted Pointer Dereference

Advisory ID: HTB23114 Product: Corel WordPerfect X6 Standard Edition Vendor: Corel Corporation Vulnerable Versions: 16.0.0.388, other versions may be also affected Tested Version: 16.0.0.388 on Windows 7 SP1 32 bits Vendor Notification: September 12, 2012 Public Disclosure: March 7, 2013...

Service Disruption or Destruction: Which is Worse?

Outcomes in security tend to be about data loss; stolen pharmaceutical formulas, jet fighter blueprints, patient records, credit card numbers etc. All of these come with a great cost to the victim and make for sexy headlines. But far too little is dissected and analyzed about service disruptions...

CentOS Update for gnome-vfs2 CESA-2013:0131 centos5

Check for the Version of gnome-vfs2 OpenVAS Vulnerability Test CentOS Update for gnome-vfs2 CESA-2013:0131 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

DSA-2581-1 mysql-5.1 - several

Bulletin has no description...

CoSoSys Endpoint Protector Detection

The remote web server hosts CoSoSys Endpoint Protector, a web-based data loss prevention application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62941; scriptversion"1.7"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"CoSoSys Endpoint Protector Detection";...

Stolen NASA Laptop Puts 'Large Number' of Employees at Risk

NASA has enacted new policies to protect employee and other sensitive information after a laptop was stolen from an employee’s locked vehicle, exposing records of personal information on a “large number” of NASA employees. The laptop was not protected by whole disk encryption, NASA officials said...

South Carolina Data Breach Casts Spotlight on Lack of Encryption, Stolen Credentials

South Carolina governor Nikki Haley said a mouthful this week when she spilled a dirty industry secret that Social Security numbers are generally not encrypted by state agencies. Reeling from a Department of Revenue data breach that leaked 3.6 million Social Security and credit card numbers as we...

Allscripts Homecare Client Local Memory Corruption

Title: Allscripts Homecare Client Local Memory Corruption tableinfo.ff2 Date: 10/25/12 Author: G13 Software Link: http://www.allscripts.com/en/solutions/post-acute-solutions/homecare/show/overview.html Version: 6.1.0, 7.0.1 Category: Application local Tested on: Windows 7 Pro 64 Bit dc585...

Untrusted Pointer Dereference Vulnerability in Corel WordPerfect X6

High-Tech Bridge Security Research Lab discovered an untrusted pointer dereference vulnerability in Corel WordPerfect. Opening of a malicious WPD WordPerfect Document causes immediate application crash, resulting in a loss of all unsaved current application data of the user. 1 Untrusted Pointer...

CVE-2009-5117

The Web Post Protection feature in McAfee Host Data Loss Prevention DLP 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files...