5462 matches found
tomcat: security manager bypass via StatusManagerServlet
It was found that Tomcat allowed the StatusManagerServlet to be loaded by a web application when a security manager was configured. This allowed a web application to list all deployed web applications and expose sensitive information such as session IDs...
About the security content of Safari 9.1.1
About the security content of Safari 9.1.1 This document describes the security content of Safari 9.1.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. T...
About the security content of tvOS 9.2.1
About the security content of tvOS 9.2.1 This document describes the security content of tvOS 9.2.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To...
About the security content of OS X El Capitan v10.11.5 and Security Update 2016-003
About the security content of OS X El Capitan v10.11.5 and Security Update 2016-003 This document describes the security content of OS X El Capitan v10.11.5 and Security Update 2016-003. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full...
CVE-2016-1670
Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resourcedispatcherhostimpl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-4477. Reason: This candidate is a reservation duplicate of CVE-2016-4477. Notes: All CVE users should reference CVE-2016-4477 instead of this candidate. All references and descriptions in this candidate have been removed to...
IDS IPS Testing Framework: pytbull
pytbull is an Intrusion Detection/Prevention System IDS/IPS Testing Framework for Snort, Suricata and any IDS/IPS that generates an alert file. It can be used to test the detection and blocking capabilities of an IDS/IPS, to compare IDS/IPS, to compare configuration modifications and to...
Onion Services Security Scan: OnionScan
OnionScan is a free and open source tool for investigating the Dark Web. For all the amazing technological innovations in the anonymity and privacy space, there is always a constant threat that has no effective technological patch – human error. Whether it is operational security leaks or softwar...
HackerOne: New hacktivity view discloses report IDs of non-public reports
The new hacktivity view unintentionally leaked the report IDs of non-public undisclosed reports through react ID's. It has the same root cause as 127620 and was reporter earlier than that, so we decided to award the same bounty. The new hacktivity view unintentionally leaked the report IDs of...
About the security content of iOS 9.3.1
About the security content of iOS 9.3.1 This document describes the security content of iOS 9.3.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To lear...
TRS(ids新老版本)设计缺陷(xxe/用户信息泄露包括密码等)
简要描述： TRSids设计缺陷xxe/用户信息泄露包括密码，好久没有发过漏洞了，突然上来看了看，发现漏洞提交页面都变了 详细说明： 首先我们看看web.xml配置文件: ServiceServlet com.trs.idm.admin.service.ServiceServlet ServiceServlet /service 跟进ServiceServlet protected void serviceHttpServletRequest request, HttpServletResponse response throws ServletException, IOExceptio...
About the security content of OS X Server 5.1
About the security content of OS X Server 5.1 This document describes the security content of OS X Server 5.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are...
About the security content of iOS 9.3
About the security content of iOS 9.3 This document describes the security content of iOS 9.3. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn mo...
About the security content of Xcode 7.3
About the security content of Xcode 7.3 This document describes the security content of Xcode 7.3. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To lear...
About the security content of watchOS 2.2
About the security content of watchOS 2.2 This document describes the security content of watchOS 2.2. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To...
About the security content of OS X El Capitan v10.11.4 and Security Update 2016-002
About the security content of OS X El Capitan v10.11.4 and Security Update 2016-002 This document describes the security content of OS X El Capitan v10.11.4 and Security Update 2016-002. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full...
VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2011-0008) (remote check)
The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities : - A directory traversal vulnerability exists that allows a remote attacker to read arbitrary files. CVE-2011-0426 - An information disclosure vulnerability exists due to...
Apache Tomcat SecurityManager Bypass Vulnerability - 01 (Feb 2016) - Linux
Apache Tomcat is prone to a SecurityManager bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat";...
Moderate: Red Hat Security Advisory: openstack-heat bug fix and security advisory
Updated openstack-heat packages that fix one security issue and resolve various bugs are now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS...
