[SECURITY] Fedora 23 Update: libgcrypt-1.6.6-1.fc23

Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...

Debian Security Advisory DSA 3656-1 (tryton-server - security update)

Two vulnerabilities have been discovered in the server for the Tryton application platform, which may result in information disclosure of password hashes or file contents. OpenVAS Vulnerability Test $Id: deb3656.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3656-1 usi...

BlueHat v16 Schedule Announced

Over the summer we had overwhelming response to our BlueHat v16 call for papers. We would like to give a special thanks to all who submitted papers for consideration. The range of content and quality of content was exceptional. So with that, today we are happy to announce our schedule for the...

PT-2016-7027

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.5.52 and earlier, 5.6.33 and earlier, 5.7.15 and earlier MariaDB versions prior to 5.5.51, 10.0.x prior to 10.0.27, and 10.1.x prior to 10.1.17 Percona Server versions prior to 5.5.51-38.1, 5.6.x prior to 5.6.32-78.0, a...

CVE-2016-0361

IBM General Parallel File System GPFS 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMI...

CVE-2016-0361

IBM General Parallel File System GPFS 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMI...

Debian Security Advisory DSA 3643-1 (kde4libs - security update)

Andreas Cord-Landwehr discovered that kde4libs, the core libraries for all KDE 4 applications, do not properly handle the extraction of archives with OpenVAS Vulnerability Test $Id: deb3643.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3643-1 using nvtgen 1.0 Script...

Threat Outbreak Alert RuleID24019: Email Messages Distributing Malicious Software on July 29, 2016

Medium Alert ID: 48295 First Published: 2016 July 29 16:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24019 may contain the following files: Name | Siz...

IBM WebSphere Application Server Detection (GIOP)

GIOP General Inter-ORB Protocol based detection of an IBM WebSphere Application Server. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

virginiageneralassembly.gov XSS vulnerability

Vulnerable URL: http://virginiageneralassembly.gov/house/agendas/agendaDates.php?id=H11=161%22/accesskey=%22X%22/onclick=%22alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

CVE-2016-3544

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General...

CVE-2016-3544

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General...

CVE-2016-3544

Affected software : Oracle Fusion Middleware – Oracle Business Intelligence Enterprise Edition (Oracle BI E.E.) component, versions 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0. Vulnerability : An unspecified vulnerability in the BI E.E. component allows remote authenticated users to affect confidentia...

CVE-2016-5787

General Electric GE Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors...

Design/Logic Flaw

General Electric GE Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors...

CVE-2016-5787

General Electric GE Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors...

Palo Alto PAN-OS Local privilege escalation (PAN-SA-2016-0012)

Palo Alto Networks firewalls do not properly sanitize the rootreboot local invocation which can potentially allow executing code with higher privileges SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

What you need to know: Navigating EU Data Protection changes – EU-US Privacy Shield and EU General Data Protection Regulation

If youre an organization with trans-Atlantic presence that transmits and stores European citizen data e.g. employee payroll & HR data, client & prospect data in the U.S. you will want to pay attention. What we will discuss was administered under the European Unions Data Protection Directive and a...

The vulnerability of the General Parallel File System allows a perpetrator to execute an application with administrator privileges.

The vulnerability of the General Parallel File System is related to insufficient authentication of network packets when the cipherList configuration parameter is enabled. Exploiting this vulnerability allows a malicious actor to execute an application with administrator privileges remotely...