Micro Focus Fortify software security center cross-site scripting vulnerability

Micro Focus Fortify Software Security Center SSC is a software lifecycle security management solution. A cross-site scripting vulnerability exists in Micro Focus Fortify software security center versions 18.1 and 18.2. The vulnerability stems from a web application that lacks proper validation of...

PostgreSQL -- anonymous remote access data corruption vulnerability

PostgreSQL project reports: The PostgreSQL Global Development Group has released a security update to all current versions of the PostgreSQL database system, including versions 9.2.4, 9.1.9, 9.0.13, and 8.4.17. This update fixes a high-exposure security vulnerability in versions 9.0 and later. Al...

Code injection

Software Center in Ubuntu 11.10, 11.04 10.10 does not properly validate server certificates, which allows remote attackers to execute arbitrary code or obtain sensitive information via a man-in-the-middle MITM attack...

CVE-2011-3150

Software Center in Ubuntu 11.10, 11.04 10.10 does not properly validate server certificates, which allows remote attackers to execute arbitrary code or obtain sensitive information via a man-in-the-middle MITM attack...

CVE-2011-3150

Software Center in Ubuntu 11.10, 11.04 10.10 does not properly validate server certificates, which allows remote attackers to execute arbitrary code or obtain sensitive information via a man-in-the-middle MITM attack...

CVE-2011-3150

Summary: CVE-2011-3150 affects Ubuntu Software Center where server certificates are not properly validated, enabling a remote MITM attack that could reveal sensitive data or allow installation of altered packages. Affected software: Software Center on Ubuntu 11.10, 11.04, and 10.10. Root cause (a...

Software Center certificate spoofing

insufficient check for server certificates...

[USN-1270-1] Software Center vulnerability

========================================================================== Ubuntu Security Notice USN-1270-1 November 21, 2011 software-center vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

Ubuntu Update for software-center USN-1270-1

Ubuntu Update for Linux kernel vulnerabilities USN-1270-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12701.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for software-center USN-1270-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1270-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.10 / 11.04 / 11.10 : software-center vulnerability (USN-1270-1)

David B. discovered that Software Center incorrectly validated server certificates when performing secure connections. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information or install altered packages and repositories. Not...

USN-1270-1: Software Center vulnerability

David B. discovered that Software Center incorrectly validated server certificates when performing secure connections. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to view sensitive information or install altered packages and repositories...

CVE-2011-3150

Software Center in Ubuntu 11.10, 11.04 10.10 does not properly validate server certificates, which allows remote attackers to execute arbitrary code or obtain sensitive information via a man-in-the-middle MITM attack...

Vulnerability in its Identity Services Engine of Cisco

Vulnerability in its Identity Services Engine of Cisco Cisco is warning users of a critical vulnerability CVE-2011-3290 in its Identity Services Engine ISE. In its security advisory, the company says that the underlying database used by ISE, its identity and access control policy platform, contai...