Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM MQ Light (CVE-2014-3065, CVE-2014-3566, CVE-2014-6457)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 7 that is used by IBM MQ Light. This also includes a fix for the Padding Oracle On Downgraded Legacy Encryption POODLE SSLv3 vulnerability CVE-2014-3566. These were disclosed as part of the IB...

Security Bulletin: IBM MQ Light - Potential authentication bypass vulnerability when using the JAASConfig property (CVE-2014-6116)

Summary IBM MQ Light contains a vulnerability in which authentication is bypassed by MQTT clients with the "JAASConfig" configuration property set. Vulnerability Details CVE ID: CVE-2014-6116 DESCRIPTION: IBM MQ Light contains a vulnerability in which authentication is bypassed by MQTT clients wi...

Security Bulletin: Vulnerability in SSLv3 affects IBM MQ Light (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM MQ Light. Vulnerability Details CVE-ID: CVE-2014-3566 DESCRIPTION: Product could allow a remote attacker to obtain sensitive information,...

Stable Channel Update for Desktop

The stable channel has been updated to 67.0.3396.87 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictio...

Jinvoo Wall Light Touch Panel Switch Detection via HTTP

Binary data 700248.prm...

HadSky Light Forum system suffers from an override access vulnerability

HadSky Light Forum System is a free and open forum system for individual users. A vulnerability exists in the HadSky Light Forum System that can be exploited to gain unauthorized access to administrator sensitive information and all user sensitive information. An attacker can exploit the...

Splunk Has Multiple Local Lift Vulnerabilities

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze machine-generated data, including data generated by all IT systems and infrastructures physical, virtual, and cloud.Splunk Enterprise is...

Foxit Reader Information Disclosure Vulnerability (CNVD-2018-10217)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An out-of-bounds reading vulnerability exists in the parsing of the U3D Light Node framework in Foxit Reader version 9.0.0.29935, where the program fails to properly validate user-submitted data. The vulnerability ca...

CVE-2018-10475

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10475

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Hacking LIFX Smart LED Light bulbs to steal WiFi Passwords

Context Information Security firm has discovered a security vulnerability in LIFX smart LED light bulbs that can be remotely controlled by mobile devices. Researchers at Context Information Security have discovered a security flaw in a WiFi enabled, smart LED light LIFX bulb that can be remotely...

Foxit Reader U3D Light Node Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Dell EMC ScaleIO certification attempts to limit improper vulnerabilities

Dell EMC ScaleIO is a software-defined solution for converting DAS storage to shared data block storage from Dell, U.S.A. Light Installation Agent LIA is one of the installation agent programs. A security vulnerability exists in LIA in Dell EMC ScaleIO versions prior to 2.5, which stems from the...

Dell EMC ScaleIO Command Injection Vulnerability

Dell EMC ScaleIO is a software-defined solution for converting DAS storage to shared data block storage from Dell, U.S.A. Light Installation Agent LIA is one of the installation agent programs. A command injection vulnerability exists in LIA in Dell EMC ScaleIO versions prior to 2.5. An attacker...

Command injection

Dell EMC ScaleIO versions prior to 2.5, contain a command injection vulnerability in the Light Installation Agent LIA. This component is used for central management of ScaleIO deployment and uses shell commands for certain actions. A remote malicious user, with network access to LIA and knowledge...

CVE-2018-1238

Dell EMC ScaleIO versions prior to 2.5, contain a command injection vulnerability in the Light Installation Agent LIA. This component is used for central management of ScaleIO deployment and uses shell commands for certain actions. A remote malicious user, with network access to LIA and knowledge...

CVE-2018-1237

Dell EMC ScaleIO versions prior to 2.5, contain improper restriction of excessive authentication attempts on the Light installation Agent LIA. This component is deployed on every server in the ScaleIO cluster and is used for central management of ScaleIO nodes. A remote malicious user, having...

Input validation

Dell EMC ScaleIO versions prior to 2.5, contain improper restriction of excessive authentication attempts on the Light installation Agent LIA. This component is deployed on every server in the ScaleIO cluster and is used for central management of ScaleIO nodes. A remote malicious user, having...

CVE-2018-1238

Dell EMC ScaleIO versions prior to 2.5, contain a command injection vulnerability in the Light Installation Agent LIA. This component is used for central management of ScaleIO deployment and uses shell commands for certain actions. A remote malicious user, with network access to LIA and knowledge...