NOAA, Satellite Data, Riddled with Vulnerabilities

The informational systems that the National Oceanic and Atmospheric Administration NOAA run are fraught with vulnerabilities and what the U.S. Department of Commerce deems “significant security deficiencies” that could leave it vulnerable to cyber attacks. That’s according to the findings of an...

mg-soft net inspector 6.5.0.828 Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: MG-SOFT Net Inspector http://www.mg-soft.com/netinsp.html bug C affects any MgWTrap3 service which is included in almost all the MG-SOFT products like MIB Browser, Query Manager, Trap Ringer Pro and so on Versions: Net Inspector =...

MG-SOFT Net Inspector 6.5.0.826 - Multiple Remote Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/28266/info Net Inspector is prone to multiple remote vulnerabilities, including: - A format-string vulnerability - A directory-traversal vulnerability - Multiple denial-of-service vulnerabilities An attacker can exploit...

EasyMail Objects 6.x Connect Method Remote Stack Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22583/info EasyMail Objects is prone to a remote stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data prior to copying it to an insufficiently sized buffer. A...

EasyMail Objects 6.0.2.0 'emimap4.dll' ActiveX Control Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36409/info EasyMail Objects ActiveX control is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied data. Successfully exploiting this issue allows remote attacke...

openSUSE Security Update : seamonkey (seamonkey-5244)

Mozilla SeaMonkey was updated to version 2.4.1, which fixes some regressions found in the 2.4 release. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update seamonkey-5244. The text description of...

SA-CONTRIB-2014-005 - Leaflet - Access bypass

The Leaflet module enables you to display an interactive map using the Leaflet library, using entities as map features. The module exposes complete data from entities used as map features to any site visitor with a Javascript inspector like Firebug. CVE identifiers issued ACVE identifier will be...

IG Report Shows DHS Making Progress, But Still Has Room to Improve on Information Security

Although there are still a number of issues that need to be addressed with the Department of Homeland Security’s information security efforts, the department is improving in many areas and making strong progress toward implementing better security controls, a new report from the Inspector General...

[Cansina] Web Content Discovery Application

It takes general available lists of common path and files used by web applications and make URL requests looking back to the server response code. Cansina stores the information in a sqlite database omitting 404 responses. One for every new url think this as a kind of projects feature and the sam...

Safari < 6.1 Multiple Security Vulnerabilities

Binary data 8048.prm...

Department of Energy Susceptible to Attack

An audit of the Department of Energy has shown that 29 new weaknesses emerged on the agency’s networks this year in addition to 10 existing that the DoE failed to fix after a 2012 audit. The audit, undertaken by the Office of Inspector General and the Office of Audits and Inspections, revealed...

Design/Logic Flaw

WebKit in Apple Safari before 6.1 disables the Private Browsing feature upon a launch of the Web Inspector, which makes it easier for context-dependent attackers to obtain browsing information by leveraging LocalStorage/ files...

CVE-2013-5130

WebKit in Apple Safari before 6.1 disables the Private Browsing feature upon a launch of the Web Inspector, which makes it easier for context-dependent attackers to obtain browsing information by leveraging LocalStorage/ files...

CVE-2013-5130

CVE-2013-5130 affects Apple Safari/WebKit prior to version 6.1 (Windows and Mac OS X platforms). The flaw occurs when the Web Inspector is launched, which disables Private Browsing, allowing context-dependent attackers to potentially obtain browsing information by leveraging LocalStorage/files. T...

Mac OS X : Apple Safari < 6.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.1. It is, therefore, potentially affected by several issues : - A bounds-checking issue exists related to handling XML files. CVE-2013-1036 - Multiple memory corruption vulnerabilities exist in WebKit...

[SECURITY] Fedora 17 Update: seamonkey-2.17-1.fc17

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

DoD Inspector General Calls Out Army CIO For Poor Mobile Device Security

The CIO of the U.S. Army failed to put in place a comprehensive security program capable of protecting data stored on commercial mobile devices such as iPhones and Androids, leaving sensitive information in key Army installations exposed. The Inspector General of the Department of Defense took th...

Mozilla Firefox ESR Code Execution Vulnerabilities - November12 (Windows)

This host is installed with Mozilla Firefox ESR and is prone to multiple code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxesrcodeexecvulnnov12win.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Firefox ESR Code Execution Vulnerabilities - November12 Windows Authors:...

Mozilla Firefox ESR Code Execution Vulnerabilities (Nov 2012) - Mac OS X

Mozilla Firefox ESR is prone to multiple code execution vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox ESR Code Execution Vulnerabilities (Nov 2012) - Windows

Mozilla Firefox ESR is prone to multiple code execution vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...