Information disclosure

The Cisco Technical Support aka com.cisco.swtgandroid application 3.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5868

The Cisco Technical Support aka com.cisco.swtgandroid application 3.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5868

CVE-2014-5868 : The Cisco Technical Support Android app (com.cisco.swtg_android, version 3.7.1) fails to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information. The NVD entry lists a CVSS2 base score of 5.4 (Medium) with ...

PT-2014-6853

Name of the Vulnerable Software and Affected Versions Cisco Technical Support application version 3.7.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from...

CVE-2014-5868: Undefined Security Weakness

The Cisco Technical Support aka com.cisco.swtgandroid application 3.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Cannot uninstall Veeam MP because Microsoft.SystemCenter.SecureReferenceOverride MP is dependent

Challenge During an attempt to uninstall Veeam Management Pack for Microsoft System Center a message appears stating that Microsoft.SystemCenter.SecureReferenceOverride MP is dependent on Veeam Base Discovery MP: Cause The Microsoft.SystemCenter.SecureReferenceOverride contains information...

CVE-2014-4700 - Vulnerability in Citrix XenDesktop could result in unauthorized access to another user's desktop

Description of Problem A vulnerability has been identified in Citrix XenDesktop that could result in a user gaining unauthorized interactive access to another user’s desktop. This vulnerability affects a specific, non-default configuration of Citrix XenDesktop 7 all versions up to and including...

BigPond 3G21WB Multiple Vulnerabilities

No description provided by source. Hard-coded credentials and command-injection vulnerabilities on BigPond 3G21WB ============================================================================== ADVISORY INFORMATION Title: Hard-coded credentials and command-injection vulnerabilities on BigPond 3G21...

CVE-2014-4040

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...

CVE-2014-4040

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...

CVE-2014-4040

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...

CVE-2014-4040: Undefined Security Weakness

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...

SOL15325 - OpenSSL vulnerability CVE-2014-0224

Client-side componentsProduct| Versions known to be vulnerable| Versions known to be not vulnerable| Vulnerable component or feature ---|---|---|--- BIG-IP LTM| 11.0.0 - 11.5.1 10.0.0 - 10.2.4| 12.0.0 11.6.0 11.5.1 HF3 11.5.0 HF4 11.2.1 HF15| Host-initiated SSL connections COMPAT SSL ciphers BIG-...

Design/Logic Flaw

sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux RHEL 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive...

CVE-2014-3925

CVE-2014-3925 affects sosreport in Red Hat sos 1.7 and earlier on RHEL 5, where the generated archive may contain an fstab with cleartext passwords and lacks a warning to review for passwords, enabling potential sensitive-information disclosure if an attacker can access the technical-support data...

CVE-2014-3925

sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux RHEL 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive...

UBUNTU-CVE-2014-3925

sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux RHEL 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive...

(RHSA-2014:0575) Low: Red Hat Enterprise Developer Toolset Version 1 One-month Retirement Notice

In accordance with the Red Hat Enterprise Developer Toolset Life Cycle policy, the Red Hat Developer Toolset Version 1 offering will be retired as of June 30, 2014, and support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including critical impact...

(RHSA-2014:0463) Low: Red Hat Enterprise Linux OpenStack Platform 3.0 - 90 Day Retirement Notice

In accordance with the Red Hat Enterprise Linux OpenStack Platform Support Policy, the one-year life cycle of Production Support for version 3 will end on July 31, 2014. On August 1, 2014, Red Hat Enterprise Linux OpenStack Platform version 3 will enter an inactive state and will no longer receiv...

[ChromeAnalysis] Tool for analysing Google Chrome web browser

ChromeAnalysis Plus is a software tool for extracting, viewing and analysing internet history from the Google Chrome web browser. The main features are described below: Extract History Extract history regarding bookmarks, cookies, downloads, favicons, logins, most visited sites, search terms,...