CVE-2014-5747

The CVE-2014-5747 entry concerns the XFINITY Constant Guard Mobile app (com.whitesky.mobile.android) for Android, version 3.1.140603. The vulnerability is that the app fails to verify X.509 certificates when establishing SSL connections, which enables man-in-the-middle attackers to spoof servers ...

UBUNTU-CVE-2014-5270

Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed...

openSUSE Security Update : tor (openSUSE-SU-2014:0975-1)

Tor 0.2.4.23 bnc889688 CVE-2014-5117 Slows down the risk from guard rotation and backports several important fixes from the Tor 0.2.5 alpha release series. - Major features : - Clients now look at the 'usecreatefast' consensus parameter to decide whether to use CREATEFAST or CREATE cells for the...

Microsoft Releases EMET 5.0 Exploit Mitigation Tool

The latest version of Microsoft’s freely available stopgap against zero-day exploits was released today with two new exploit mitigations and a batch of new configuration options. The update to Microsoft’s Enhanced Mitigation Experience Tool kit, or EMET, comes six months after a technical preview...

Qihoo 360 Security Guard breg device drivers Privilege Escalation Vulnerability

No description provided by source. / Software Link: http://sd.360.cn/sddownload1.html?src=360home Version: 6.1.5.1009 Tested on: Windows xp Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is very famous in China. Some vulnerabilities have...

Power On Software On Guard for MacOS 3.2 Emergency Password Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/553/info On Guard, a security program for MacOS, includes an emergency password feature in the event that the administrative password is lost or forgotten. If the user name 'emergency' is entered, On Guard will generate a...

DSA-2968-1 gnupg2 - security update

Bulletin has no description...

USN-2258-1 gnupg, gnupg2 vulnerability

Jean-René Reinhard, Olivier Levillain and Florian Maury discovered that GnuPG incorrectly handled certain OpenPGP messages. If a user or automated system were tricked into processing a specially-crafted message, GnuPG could consume resources, resulting in a denial of service...

UBUNTU-CVE-2014-4617

The douncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service infinite loop via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence...

DEBIAN-CVE-2014-4617

The douncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service infinite loop via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence...

Debian Security Advisory DSA 2967-1 (gnupg - security update)

Jean-René Reinhard, Olivier Levillain and Florian Maury reported that GnuPG, the GNU Privacy Guard, did not properly parse certain garbled compressed data packets. A remote attacker could use this flaw to mount a denial of service against GnuPG by triggering an infinite loop. OpenVAS Vulnerabilit...

[SECURITY] [DSA 2946-1] python-gnupg security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2946-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 04, 2014 http://www.debian.org/security/faq -...

Debian DSA-2946-1 : python-gnupg - security update

Multiple vulnerabilities were discovered in the Python wrapper for the Gnu Privacy Guard GPG. Insufficient sanitising could lead to the execution of arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

[SECURITY] [DSA 2946-1] python-gnupg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2946-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 04, 2014 http://www.debian.org/security/faq -...

DSA-2946-1 python-gnupg - security update

Bulletin has no description...

Debian: Security Advisory (DSA-2946-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3 6 0 safety guard is closed vulnerability analysis-vulnerability warning-the black bar safety net

3 6 0 safety guard is closed the vulnerability analysis and testing environment for 3 6 0 security guards 9. 0, the latest version of Security Defender has to fix this vulnerability Phenomenon A Trojan can shut down 3 6 0 security guards, through reverse analysis found that the Trojan horse just...

First Paid Fake Android Antivirus App Downloaded 10,000 times from Google Play Store

Well, we all are very conscious, when it comes to the security of our personal information, security of our financial data and security of everything related to us. In the world of Smart devices where our Smartphones knows more than we know ourselves. To keep our device protected from harmful...

Python-gnupg远程命令执行漏洞(CVE-2014-1929)

BUGTRAQ ID: 65539 CVECAN ID: CVE-2014-1929 Python-gnupg是使用Python API的GNU隐私保护程序。 Python-gnupg在实现上存在远程命令执行漏洞，攻击者可利用此漏洞在受影响应用上下文中执行任意命令。 0 Google Python-gnupg 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： https://code.google.com/p/python-gnupg/...

Fedora Update for gnupg FEDORA-2013-23603

Check for the Version of gnupg OpenVAS Vulnerability Test Fedora Update for gnupg FEDORA-2013-23603 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...