335 matches found
Design/Logic Flaw
The Dubrovnik Guided Walking Tours aka com.mytoursapp.android.app351 application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6923
The Dubrovnik Guided Walking Tours aka com.mytoursapp.android.app351 application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6923
The CVE-2014-6923 entries concern the Dubrovnik Guided Walking Tours Android app (com.mytoursapp.android.app351) version 1.3.2. Affected component: network security logic where the app does not verify X.509 certificates from SSL servers. Root cause: missing/incorrect certificate validation allows...
CipherShed - Secure Encryption Software (fork of the TrueCrypt Project)
CipherShed is free as in free-of-charge and free-speech encryption software for keeping your data secure and private. It started as a fork of the now-discontinued TrueCrypt Project. CipherShed is a program that can be used to create encrypted files or encrypt entire drives including USB flash...
Siemens SCALANCE W Client Detection
Binary data 6775.prm...
Siemens SCALANCE W Access Point Detection
Binary data 6774.prm...
CVE-2013-7358
Unspecified vulnerability in SAP Guided Procedures Archive Monitor allows remote attackers to obtain usernames, roles, profiles, and possibly other identity information via unknown vectors...
CVE-2013-7358
Unspecified vulnerability in SAP Guided Procedures Archive Monitor allows remote attackers to obtain usernames, roles, profiles, and possibly other identity information via unknown vectors...
CVE-2013-7358
Technical details for CVE-2013-7358 are not publicly provided in the supplied documents. No affected products, vectors, or remediation are disclosed. Monitor for updates.
Report: Japan Fesses Up to First Cyber Attack on Defense Industry
Mitsubishi Heavy Industries MHI, Japan’s primary defense contractor, recently suffered a data breach that may be the first major cyber-attack on Japan’s defense industry to be publicly disclosed, according to a report from Reuters. The attack, first discovered in early August, is believed to have...
Cross site scripting
Cross-site scripting XSS vulnerability in enterbug.cgi in Bugzilla 2.17.1 through 2.20.4, 2.22.x before 2.22.3, and 3.x before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the buildid field in the "guided form."...
CVE-2005-0539
Unknown vulnerability in IBM Hardware Management Console HMC before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard...
[SA14377] IBM HMC Guided Setup Wizard Vulnerability
TITLE: IBM HMC Guided Setup Wizard Vulnerability SECUNIA ADVISORY ID: SA14377 VERIFY ADVISORY: http://secunia.com/advisories/14377/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: IBM Hardware Management Console HMC http://secunia.com/product/3967/...
CVE-2005-0539
CVE-2005-0539 affects IBM Hardware Management Console (HMC) for POWER5 servers prior to version 4.4. The issue, related to the Guided Setup Wizard, permits local users to gain privileges (partial confidentiality, integrity, and availability impacts described by CVSS 2.0: Base 4.6). IBM lists a fi...