USN-2956-1: ubuntu-core-launcher vulnerability

Zygmunt Krynicki discovered that ubuntu-core-launcher did not properly sanitize its input and contained a logic error when determining the mountpoint of bind mounts when using snaps on Ubuntu classic systems eg, traditional desktop and server. If a user were tricked into installing a malicious sn...

CVE-2016-1580

The setupsnappyosmounts function in the ubuntu-core-launcher package before 1.0.27.1 improperly determines the mount point of bind mounts when using snaps, which might allow remote attackers to obtain sensitive information or gain privileges via a snap with a name starting with "ubuntu-core."...

Ubuntu 16.04 LTS (Xenial Xerus) - The leading OS for PC, tablet, phone and cloud

Ubuntu is an ancient African word meaning ‘humanity to others’. It also means ‘I am what I am because of who we all are’. The Ubuntu operating system brings the spirit of Ubuntu to the world of computers. Where did it all begin? Linux was already established as an enterprise server platform in...

Norton Snap qr code reader - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Norton Snap qr code reader published at the 'play' market has multiple vulnerabilities...

Lidow:mirror collage snap grid - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Lidow:mirror collage snap grid published at the 'play' market has multiple vulnerabilities...

Snap - Sell with a photo - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Snap - Sell with a photo published at the 'play' market has multiple vulnerabilities...

Amazon Linux: Security Advisory (ALAS-2013-233)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2016-3722 · Sisco · Sisco Mms-Ease +2

Name of the Vulnerable Software and Affected Versions: SISCO MMS-EASE and AX-S4 ICCP products affected versions not specified Description: The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending a crafted packet to the SNAP Lite component...

IBM General Parallel File System Information Disclosure Vulnerability

IBM General Parallel File System GPFS is a scalable, highly available, high-performance enterprise file management system optimized for petabyte-scale storage management from IBM in the United States. A security vulnerability exists in the /usr/lpp/mmfs/bin/gpfs.snap file in IBM GPFS version 4.1....

powerpc-utils: snap creates archives with fstab and yaboot.conf which may expose certain passwords

A flaw was found in the way the snap utility of powerpc-utils generated an archive containing a configuration snapshot of a service. A local attacker could obtain sensitive information from the generated archive such as plain text passwords...

Low: Red Hat Security Advisory: powerpc-utils security, bug fix, and enhancement update

Updated powerpc-utils packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives...

CVE-2014-5615

The Snap Secure aka com.exclaim.snapsecure.app application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Snap Secure aka com.exclaim.snapsecure.app application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5615

The Snap Secure aka com.exclaim.snapsecure.app application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5615

CVE-2014-5615 affects the Snap Secure app (com.exclaim.snapsecure.app) version 9.5 for Android, where SSL/TLS certificate verification is not performed. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificates. The vulnerability details ar...

PT-2014-6600

Name of the Vulnerable Software and Affected Versions Snap Secure aka com.exclaim.snapsecure.app version 9.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

CVE-2014-5615: Undefined Security Weakness

The Snap Secure aka com.exclaim.snapsecure.app application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

IBM AIX <= 4.2.1 snap Insecure Temporary File Creation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/375/info The snap command is a diagnostic utlitiy for gathering system information on AIX platforms. It can only be executed by root, but it copies various system files into /tmp/ibmsupt/ under /tmp/ibmsupt/general/ you...

UBUNTU-CVE-2014-4040

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...

CVE-2014-4040: Undefined Security Weakness

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...