3951 matches found
[SECURITY] Fedora 19 Update: ksudoku-4.10.4-1.fc19
KSudoku is a logic-based symbol placement puzzle. The player has to fill a grid with symbols so that each column, row and block on the game board contains only one instance of each symbol. In KSudoku the symbols are usually the numbers 1 to 9, but may be the letters A to P or A to Y in larger...
[SECURITY] Fedora 19 Update: kigo-4.10.4-1.fc19
Go is a strategic board game for two players. It is also known as igo Japanese, weiqi or wei ch'i Chinese or baduk Korean. Go is noted for being rich in strategic complexity despite its simple rules. The game is played by two players who alternately place black and white stones playing pieces, no...
[SECURITY] Fedora 19 Update: kblackbox-4.10.4-1.fc19
KBlackBox is a game of hide and seek played on a grid of boxes. The computer has hidden several balls within this box. By shooting beams into the box and observing where they emerge it is possible to deduce the positions of the hidden balls. The fewer beams you use and the quicker you are to find...
Iranian Hackers targeting US oil, gas, and electric companies
For all the talk about China and the Syrian Electronic Army, it seems there's another threat to U.S. cyber interests i.e Iran. Series of potentially destructive computer attacks that have been targeting American oil, gas and electricity companies tracked back to Iran. Iranian hackers were able to...
Iranian Hackers targeting US oil, gas, and electric companies
For all the talk about China and the Syrian Electronic Army, it seems there's another threat to U.S. cyber interests i.e Iran. Series of potentially destructive computer attacks that have been targeting American oil, gas and electricity companies tracked back to Iran. Iranian hackers were able to...
Grid Utilities Critical Infrastructure Protection Lacking
It would seem that what spurs private and public electric grid utility operators to action with regard to cybersecurity isn’t the Chinese or Iranians attacking them, but the word “mandatory”. A paper published yesterday by two U.S. legislators revealed that when there are mandatory cybersecurity...
CVE-2013-1178
Multiple buffer overflows in the Cisco Discovery Protocol CDP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.24 and 6.x before 6.11, Nexus 5000 and 5500 devices 4.x and 5.x before 5.13N11, Nexus 4000 devices before 4.12E11h, Nexus 3000 devices 5.x before 5.03U31, Nexus...
Buffer overflow
Multiple buffer overflows in the Cisco Discovery Protocol CDP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.24 and 6.x before 6.11, Nexus 5000 and 5500 devices 4.x and 5.x before 5.13N11, Nexus 4000 devices before 4.12E11h, Nexus 3000 devices 5.x before 5.03U31, Nexus...
Alstom Grid S1 Agile Improper Authorization
OVERVIEW This advisory provides mitigation details for a vulnerability affecting the Alstom Grid MiCOM S1 Agile and S1 Studio Software. Note: Alstom Grid MiCOM S1 Studio Software is its own software suite. A user could have MiCOM S1 Studio Software from a different vendor. This advisory only...
Cisco Connected Grid Network Management System SQL Injection Vulnerabilities
A vulnerability in device management of the Cisco Connected Grid Network Management System CG-NMS could allow an unauthenticated, remote attacker to modify data in the CG-NMS database by using SQL injection. The vulnerability is due to insufficient input validation. An attacker could exploit this...
Cisco Connected Grid Network Management System Cross-Site Scripting Vulnerabilities
Cisco Connected Grid Network Management System CG-NMS contains multiple vulnerabilities that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. Cisco Connected Grid Network Management System is susceptible to cross-site scripting XSS vulnerabilities in the...
CVE-2013-1163
Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCue14553 and CSCue38746...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914, CSCue38884, CSCue38882,...
CVE-2013-1171
Multiple cross-site scripting XSS vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914, CSCue38884, CSCue38882,...
CVE-2013-1163: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCue14553 and CSCue38746...
CVE-2013-1171: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914, CSCue38884, CSCue38882,...
PT-2013-2931
Name of the Vulnerable Software and Affected Versions Cisco Connected Grid Network Management System CG-NMS affected versions not specified Description The issue concerns multiple SQL injection vulnerabilities in the device-management implementation. These vulnerabilities allow remote attackers t...
PT-2013-2939
Name of the Vulnerable Software and Affected Versions Cisco Connected Grid Network Management System CG-NMS affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the element-list implementation. These vulnerabilities allow remote...
Important: Red Hat Security Advisory: JBoss Data Grid 6.1.0 update
JBoss Data Grid 6.1.0, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...