1154 matches found
CVE-2016-10103
Affected software/product: Hitek Software Automize. Vulnerability: Information disclosure in encryptionProfiles.jsd caused by the Read attribute being set for Users, enabling recovery of encrypted passwords for GPG Encryption profiles. Root cause / affected component: Read permission on User data...
CVE-2016-10103: Inadequate Encryption Strength
Information Disclosure can occur in encryptionProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for GPG Encryption profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x...
PT-2017-7736
Name of the Vulnerable Software and Affected Versions Hitek Software's Automize versions 10.0 through 10.25 Hitek Software's Automize versions 11.0 through 11.14 Description The issue allows an attacker to recover encrypted passwords for GPG Encryption profiles due to the Read attribute being set...
Fedora Update for distribution-gpg-keys FEDORA-2016-34e61fa48d
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Phabricator: Fetching binaries (for software installation) over HTTP without verification (RCE as ROOT by MITM)
From: https://secure.phabricator.com/book/phabricator/article/installationguide/ Installing Required Components If you are installing on Ubuntu or an RedHat derivative, there are install scripts available which should handle most of the things discussed in this document for you: RedHat Derivative...
Fedora 25 : distribution-gpg-keys / mock (2016-34e61fa48d)
Security fix for CVE-2016-6299 - Additionally GPG key for Mageia has been renamed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
Paragon Initiative Enterprises: Missing GIT tag/commit verification in Docker
in: https://github.com/paragonie/airship/blob/master/docker/Dockerfile.airshipL14-L16 RUN git clone https://github.com/jedisct1/libsodium.git /tmp/sodium WORKDIR /tmp/sodium RUN git checkout tags/1.0.10 The code is fetched from Github without one of: 1. signature verification on relevant tag. GPG...
Fedora Update for distribution-gpg-keys FEDORA-2016-5a12527790
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 23 Update: distribution-gpg-keys-1.7-1.fc23
GPG keys used by various Linux distributions to sign packages...
Fedora 23 : distribution-gpg-keys / mock (2016-5a12527790)
Security fix for CVE-2016-6299 - Additionally GPG key for Mageia has been renamed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
[SECURITY] Fedora 25 Update: distribution-gpg-keys-1.7-1.fc25
GPG keys used by various Linux distributions to sign packages...
Fedora 24 : distribution-gpg-keys / mock (2016-145afea99e)
Security fix for CVE-2016-6299 - Additionally GPG key for Mageia has been renamed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora Update for distribution-gpg-keys FEDORA-2016-145afea99e
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 24 Update: distribution-gpg-keys-1.7-1.fc24
GPG keys used by various Linux distributions to sign packages...
GPG Patches 18-Year-Old Libgcrypt RNG Bug
New versions of Libgcrypt and Gnu Privacy Guard GnuPG or GPG released on Wednesday include security fixes for vulnerabilities discovered in the mixing functions of the Libgcrypt random number generator. The flaws were privately disclosed by Felix Dörre and Vladimir Klebanov of Karlsruhe Institute...
openSUSE Security Update : libidn (openSUSE-2016-925)
This libidn update to version 1.33 fixes the following issues : Security issues fixed : - CVE-2015-8948, CVE-2016-6262: Fixed an out-of-bounds-read when reading one zero byte as input bsc990189. - CVE-2016-6263: Fixed stringpreputf8nfkcnormalize to reject invalid UTF-8 bscboo990191. Included...
OracleVM 3.2 : rpm (OVMSA-2016-0077)
The remote OracleVM system is missing necessary patches to address critical security updates : - Add missing files in /usr/share/doc/ - Fix warning when applying the patch for 1163057 - Fix race condidition where unchecked data is exposed in the file system CVE-2013-64351163057 - Fix segfault on...
[SECURITY] Fedora 24 Update: obs-signd-2.2.1-8.fc24
The OpenSUSE Build Service sign client and daemon. This daemon can be used to sign anything via gpg by communicating with a remote server to avoid the need to host the private key on the same server...
Cisco UCS Invicta Software Default GPG Key Vulnerability
A vulnerability in Cisco UCS Invicta Software could allow an unauthenticated, remote attacker to access some encrypted information, if the attacker can intercept communication between an affected system and a Cisco UCS Invicta Autosupport server. The vulnerability is due to the presence of a...
[SECURITY] Fedora 23 Update: obs-signd-2.2.1-8.fc23
The OpenSUSE Build Service sign client and daemon. This daemon can be used to sign anything via gpg by communicating with a remote server to avoid the need to host the private key on the same server...