3932 matches found
CVE-2016-5416
It was found that 389 Directory Server was vulnerable to a flaw in which the default ACI Access Control Instructions could be read by an anonymous user. This could lead to leakage of sensitive information...
APSB16-40 Security updates available for Adobe Experience Manager Forms (LiveCycle)
Adobe has released security updates for Adobe Experience Manager AEM Forms on Windows, Linux, Solaris and AIX. These updates resolve two important input validation issues that could be used in cross-site scripting attacks CVE-2016-6933 and CVE-2016-6934. Adobe recommends users apply the available...
FreeBSD : xen-kernel -- x86: Mishandling of instruction pointer truncation during emulation (49211361-ba4d-11e6-ae1b-002590263bf5)
The Xen Project reports : When emulating HVM instructions, Xen uses a small i-cache for fetches from guest memory. The code that handles cache misses does not check if the address from which it fetched lies within the cache before blindly writing to it. As such it is possible for the guest to...
Linux Kernel 'kvm/emulate.c' Denial of Service Vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'x86decodeinsn' function of the kvm/emulate.c file in versions of Linux kernel prior to 4.8.7. A local attacker could exploit...
CVE-2016-9383
Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive information, cause a denial of service host crash, or execute arbitrary code on the host by leveraging broken emulation of bit test instructions...
Intentionally Vulnerable Machine for Exploit Testing: Metasploitable3
Intentionally Vulnerable Machine for Exploit Testing Metasploitable3 is a free virtual machine that allows you to simulate attacks largely using Metasploit. It has been used by people in the security industry for a variety of reasons: such as training for network exploitation, exploit development...
Moderate: Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update
An update for 389-ds-base is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
389-ds-base: ACI readable by anonymous user
It was found that 389 Directory Server was vulnerable to a flaw in which the default ACI Access Control Instructions could be read by an anonymous user. This could lead to leakage of sensitive information...
MS16-133: Description of the security update for Excel 2010: November 8, 2016
MS16-133: Description of the security update for Excel 2010: November 8, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
MS16-133: Description of the security update for 2007 Microsoft Office Suite: November 8, 2016
None None...
389-ds-base: ACI readable by anonymous user
It was found that 389 Directory Server was vulnerable to a flaw in which the default ACI Access Control Instructions could be read by an anonymous user. This could lead to leakage of sensitive information...
PT-2017-8723 · Red Hat +3 · Red Hat Enterprise Linux Desktop +8
Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux Desktop versions 6 through 7 Red Hat Enterprise Linux HPC Node versions 6 through 7 Red Hat Enterprise Linux Server versions 6 through 7 Red Hat Enterprise Linux Workstation versions 6 through 7 389 Directory Server...
[slackware-security] mariadb
New mariadb packages are available for Slackware 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mariadb-10.0.28-i586-1slack14.2.txz: Upgraded. This update fixes several security issues. For more information, see:...
Updated 389-ds-base packages fix security vulnerability
A vulnerability in 389-ds-base was found that allows to bypass limitations for compare and read operations specified by Access Control Instructions. When having LDAP sub-tree with some existing objects and having BIND DN which have no privileges over objects inside the sub-tree, unprivileged user...
MS16-121: Description of the security update for Word Automation Services on SharePoint Server 2013: October 11, 2016
MS16-121: Description of the security update for Word Automation Services on SharePoint Server 2013: October 11, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more abo...
MS16-120 and MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016
None None...
Important: Red Hat Security Advisory: Red Hat JBoss A-MQ 6.3 security update
Red Hat JBoss A-MQ 6.3, which fixes multiple security issues and includes several bug fixes and enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
Supported NFS protocols and how to identify which protocol is being used
Q. What are the supported version of NFS protocol ? How to identify which being used now ? A. NFSv3 is supported with XenServer 6.1,6.2,6.5 and XenServer version 7 supports NFSv3 and NFSv4.If the underlying storage array does not support NFSv4, NFSv3 will be used to mount the share. In order to...