11767 matches found
SUSE-SU-2016:0624-1 Security update for openssl
This update for openssl fixes various security issues and bugs: Security issues fixed: - CVE-2016-0800 aka the 'DROWN' attack bsc968046: OpenSSL was vulnerable to a cross-protocol attack that could lead to decryption of TLS sessions by using a server supporting SSLv2 and EXPORT cipher suites as a...
Centreon Web Useralias Command Execution
Centreon Web Interface use exploit/linux/http/centreon/useraliasexec msf undefineduseraliasexec show actions ...actions... msf undefineduseraliasexec set ACTION msf undefineduseraliasexec show options ...show and set options... msf undefineduseraliasexec run This module requires Metasploit:...
[SECURITY] [DSA 3491-1] icedove security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3491-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 24, 2016 https://www.debian.org/security/faq -...
The vulnerability of Google Chrome’s browser allows a hacker to replace URLs.
The vulnerability of the CustomButton::AcceleratorPressed function in the ui/views/controls/button/custombutton.cc file of Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace URLs through unauthorized actions involving...
The vulnerability of Google Chrome allows a perpetrator to replace the source of a document.
The vulnerability of the Omnibox browser implementation by Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to remotely replace the source of the document...
Mageia: Security Advisory (MGASA-2016-0072)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
squid -- SSL/TLS processing remote DoS
Squid security advisory 2016:1 reports: Due to incorrectly handling server errors Squid is vulnerable to a denial of service attack when connecting to TLS or SSL servers. This problem allows any trusted client to perform a denial of service attack on the Squid service regardless of whether TLS or...
Wanna Mine Bitcoins Faster? Researchers Find New Way to Do it
A new machine for Bitcoin Mining called "Approximate Hardware" would make Bitcoin mining easier. Bitcoin had gained tremendous popularity over a few couple of years among the virtual currencies due to its decentralized principle. Mining a single Bitcoin is not an ice cake walk, as it requires an...
Vulnerabilities of operating systems such as Mac OS X and iOS, which allow attackers to trigger service interruptions
The vulnerability of the kernel in Mac OS X and iOS lies in code errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created application...
Vulnerabilities of operating systems such as Mac OS X and iOS, which allow attackers to trigger service interruptions
The vulnerability of the kernel in Mac OS X and iOS lies in code errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created application...
Vulnerabilities of the Google Chrome browser and the HarfBuzz text formatting library, which allow a perpetrator to trigger a service failure or exert other effects
The multiple vulnerabilities of the Google Chrome browser and the HarfBuzz text formatting library are related to code errors. Exploiting these vulnerabilities could allow a malicious actor to cause service interruptions or potentially have other adverse effects...
The vulnerability of the Oracle GoldenGate data flow management tool allows a attacker to compromise the integrity, availability, and confidentiality of information.
The vulnerability of the Oracle GoldenGate data management component is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, availability, and confidentiality of information...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions or potentially have other adverse effects...
The vulnerability of the Mac OS X operating system allows a hacker to replace the Keychain server.
The vulnerability of the Mac OS X operating system is caused by errors in the interaction with the Keychain program. Exploiting this vulnerability allows a malicious actor to remotely replace the Keychain servers...
MS16-022: Security Update for Adobe Flash Player (3135782)
The remote Windows host is missing KB3135782. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows a remote attacker to execute arbitrary code. CVE-2016-0985 - Multiple use-after-free errors exist that allow a remote attacker to execute arbitrary...
Adobe Flash Player <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)
The version of Adobe Flash Player installed on the remote Windows host is prior or equal to version 20.0.0.286. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows a remote attacker to execute arbitrary code. CVE-2016-0985 - Multiple use-after-free...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions or potentially have other adverse effects...
Vulnerabilities in the distributed Git version control system, which allow a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The multiple vulnerabilities of the distributed Git version control system are related to code errors. Exploitation of these vulnerabilities could allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of Oracle Communications Applications’ network management and organization software allows attackers to compromise the integrity, availability, and confidentiality of information.
The vulnerability of the Oracle Communications Applications’ network management and organization software component is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, availability, and confidentiality of information by making...
Vulnerability of the Java Platform software platform, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.
The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to affect the integrity, availability, and confidentiality of information by manipulating the CORBA system...