10193 matches found
Report: L3 Warns Employees Of Attacks Using Compromised SecurID Tokens
Executives at U.S. defense contractor L-3 Communications warned employees in April about an attempt by unknown assailants to compromise the company’s network using forged SECURID tokens from RSA. The report, if accurate would be the second attack on a leading defense contractor with links back to...
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 : bind (SSA:2006-310-01)
New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. The minimum OpenSSL version was raised to OpenSSL 0.9.7l and OpenSSL 0.9.8d to avoid exposure to known security flaws in older versions these patches were already issued for Slackware. ...
Report: Norwegian Military Hit by Cyber Attack in March
The Norwegian military has admitted it was hit by a “massive” phishing cyber attack in March, according to a report from Techworld.com. The attack began in an e-mail sent to select members of the defense ministry from what appeared to be another Norwegian government agency. An enclosed attachment...
CVE-2011-1423
Cross-site scripting XSS vulnerability in RSA Data Loss Prevention DLP Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in RSA Data Loss Prevention DLP Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-1423
CVE-2011-1423 is a cross-site scripting (XSS) vulnerability in RSA Data Loss Prevention (DLP) Enterprise Manager 8.x, caused by improper input validation. It affects RSA DLP Enterprise Manager versions 8.x prior to 8.5 SP1 and allows remote attackers to inject arbitrary web script or HTML via uns...
CVE-2011-1423
Cross-site scripting XSS vulnerability in RSA Data Loss Prevention DLP Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-1423: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in RSA Data Loss Prevention DLP Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2011-3119
Name of the Vulnerable Software and Affected Versions RSA Data Loss Prevention DLP Enterprise Manager versions prior to 8.5 SP1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior t...
Report: RSA Hack Part Of Larger Operation
A sophisticated attack against RSA, the security division of EMC, shares characteristics with similar attacks against Western firms, according to the security blog Krebsonsecurity. Despite RSA’s claims that it was the victim of a unique and targeted attack, research into the incident by reporter...
Source Code is the New Hacker Currency !
Source Code is the New Hacker Currency ! No doubt you've been paying attention to the data breaches pile up lately... but have you noticed a trend? If you wade through the hype and hyperbole, dig into the details of the most prolific intrusions in recent history you'll notice one thing that shine...
EMC RSA Data Loss Prevention crossite scripting
No description provided...
ESA-2011-015: RSA, The Security Division of EMC, announces a fix for a security vulnerability in RSA Data Loss Prevention
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-015: RSA, The Security Division of EMC, announces a fix for a security vulnerability in RSA Data Loss Prevention Advisories Updated April 25, 2011 Summary: RSA, The Security Division of EMC, announces a fix for a security vulnerability in RSA...
CVE-2011-1422
Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2011-1422
Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2011-1422
CVE-2011-1422 is an XSS vulnerability in an unspecified Shockwave Flash file used by EMC RSA Adaptive Authentication On-Premise (AAOP) versions 2.x, 5.7.x and 6.x. The affected component is the Flash/Shockwave content within AAOP; the root cause is an input/validation issue allowing arbitrary web...
CVE-2011-1422: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
PT-2011-3118
Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication On-Premise AAOP versions 2.x through 6.x Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions...