1832 matches found
Design/Logic Flaw
The Stop & Shop SCAN IT! Mobile aka com.modivmedia.scanitss application 7.21.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5931
The Stop & Shop SCAN IT! Mobile aka com.modivmedia.scanitss application 7.21.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5931
The CVE-2014-5931 issue affects the Stop & Shop SCAN IT! Mobile Android app (package com.modivmedia.scanitss) version 7.21.00. The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive inform...
Microsoft Internet Explorer 6.0 Href Title Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18820/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because of an error in processing an HTML 'href' tag with a very large title. An attacker can exploit this vulnerability to cause the...
Siemens Simatic S7-1200 CPU START/STOP Module
No description provided by source...
Siemens Simatic S7-300/400 CPU START/STOP Module
No description provided by source...
WordPress Stop User Enumeration Security Bypass Vulnerability
WordPress Stop User Enumeration Plugin is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Atmail Webmail Server before 7.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add user accounts, 2 modify user accounts, 3 delete user accounts, or 4 stop the product's service...
CVE-2013-4000
Multiple cross-site request forgery CSRF vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attackers to hijack the authentication of administrators for requests that 1 start or 2 stop services...
PT-2016-4073 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.3.3 Description: The issue allows local users to gain privileges or cause a denial of service use-after-free by leveraging improper access to a certain error field in the ext4 journal stop function...
Crypto Party, Anti-Surveillance Rally in DC
WASHINGTON — Saturday marked the 12-year anniversary of the initial signing of the controversial USA PATRIOT Act, the anti-terrorism bill signed into law shortly after the terrorist attacks on Sept. 11, 2001, sections of which have allegedly given federal law enforcement the authority to...
MS13-081: Description of the security update for USB drivers: October 8, 2013
None None...
MS13-063: Vulnerabilities in Windows kernel could allow elevation of privilege: August 13, 2013
None None...
Oracle Linux 5 / 6 : libxml2 (ELSA-2012-1288)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1288 advisory. - Change the XPath code to percolate allocation error CVE-2011-1944 - Fix an off by one pointer access CVE-2011-3102 - adds randomization to hash a...
Safari information disclosure vulnerability
Overview Safari contains an information disclosure vulnerability caused the by the improper handling of XML files. Takayoshi Isayama from Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
DEBIAN-CVE-2012-5635
The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by 1 tests/volume.rc, 2 extras/hook-scripts/S30samba-stop.sh, and possibly other vectors,...
How to Forcibly Stop Stuck Jobs
Notice of Future Change This article may be retired in the future. As the product has matured, the incidence of jobs or tasks becoming "stuck" has decreased significantly. However, there are instances where a job might be executing a background task, giving the appearance that it has become stuck...
dnsmasq security, bug fix and enhancement update
2.48-13 - Fix the DHCP RELEASE problem when two or more dnsmasq instances are running rhbz887156 2.48-12 - Fixing initscript restart stop functions rhbz850944 2.48-11 - Revert previous changes because of many problems with --bind-dynamic option backport. - Dropping...
