2687 matches found
CVE-2017-3378: Undefined Security Weakness
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...
PT-2016-7860 · Pivotal +4 · Rabbitmq +3
Name of the Vulnerable Software and Affected Versions: Pivotal RabbitMQ versions 3.x through 3.5.7 Pivotal RabbitMQ versions 3.6.x through 3.6.5 RabbitMQ for PCF versions 1.5.x through 1.5.19 RabbitMQ for PCF versions 1.6.x through 1.6.11 RabbitMQ for PCF versions 1.7.x through 1.7.6 Description:...
UBUNTU-CVE-2016-9877
An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT MQ Telemetry Transport connection authentication with a username/password pair succeeds if an existing username is provid...
Adcon Telemetry A850 Telemetry Gateway Base Station Cross-Site Scripting Vulnerability
The Adcon Telemetry A850 Telemetry Gateway Base Station is a wireless telemetry system from Adcon Telemetry of Austria. A cross-site scripting vulnerability exists in the Adcon Telemetry A850 Telemetry Gateway Base Station. An attacker can exploit this vulnerability to inject arbitrary JavaScript...
Microsoft Shares Telemetry Data Collected from Windows 10 Users with 3rd-Party
Cyber security is a major challenge in today's world, as cyber attacks have become more automated and difficult to detect, where traditional cyber security practices and systems are no longer sufficient to protect businesses, governments, and other organizations. In past few years, Artificial...
Free SSL Sparks Unprecedented Growth in Encrypted Traffic
If recent telemetry from Mozilla is indeed representative of the Internet, then it would appear that half of all traffic in transit is encrypted, a more than 10 percent jump from last December. The emergence of free Certificate Authorities such as Let’s Encrypt, and similar gratis HTTPS certifica...
Cumulative update for Windows 10 Version 1511: October 11, 2016
None None...
October 11, 2016 — KB3192441 (OS Build 10586.633)
None None...
XenDesktop 7.8 and 7.9 - System Hangs on Telemetry Service
Customers report provisioned targets device running VDA 7.8, hang after system boot on screen "please wait" or "getting devices ready" VDA 7.8 or 7.9 is booted and hangs at one of below reported screens at console, never progressing further: "Please wait" spinning wheel, "Please wait while...
Adcon Telemetry A850 Telemetry Gateway Base Station Vulnerabilities
OVERVIEW Independent researcher Aditya K. Sood has identified a cross-site scripting vulnerability in Adcon Telemetry’s A850 Telemetry Gateway Base Station. Adcon Telemetry has produced a new firmware version to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED...
The vulnerability of the WebSphere MQ message processing service, which allows a hacker to obtain confidential information
The vulnerability of the MQXR component of the WMQ Telemetry service in the WebSphere MQ processing system lies in the fact that registration data is stored in an open text file. Exploiting this vulnerability could allow a local attacker to obtain confidential information...
IBM WebSphere MQ Information Disclosure Vulnerability (CNVD-2016-01069)
IBM WebSphere MQ is a messaging middleware product from IBM, USA. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in the MQXR service in WMQ Telemetry for IBM WebSphere MQ, which stems from a program...
Windows 10 Sends Your Data 5500 Times Every Day Even After Tweaking Privacy Settings
Myth: By disabling all privacy compromising and telemetry features on Windows 10 will stop Microsoft to track your activities. Fact: Even after all telemetry features disabled, Windows 10 is phoning home more than you could ever think of. Ever since the launch of Microsoft's newest operating...
Code injection
The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore password, which allows local users to obtain sensitive information by reading this file...
CVE-2015-2012
The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore password, which allows local users to obtain sensitive information by reading this file...
CVE-2015-2012
The CVE-2015-2012 entry concerns IBM WebSphere MQ WMQ Telemetry’s MQXR Service. Affected are WMQ versions: 7.1 prior to 7.1.0.7, 7.5 up to 7.5.0.5, and 8.0 prior to 8.0.0.4. The vulnerability is an information disclosure caused by world-readable permissions on a plaintext file that contains the S...
CVE-2015-2012: Exposure of Sensitive Information to an Unauthorized Actor
The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore password, which allows local users to obtain sensitive information by reading this file...
The vulnerability of the microprogramming software of the Telemetry Gateway allows a intruder to gain administrator privileges.
The vulnerability of the Microprogrammed Software of the Telemetry Gateway exists due to the rigid encoding of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain administrator privileges...
Adcon Telemetry A840 Telemetry Gateway Base Station Information Disclosure Vulnerability
The Adcon Telemetry A840 Telemetry Gateway is a core gateway product for monitoring networks from Adcon Telemetry of Austria. An information disclosure vulnerability exists in the Adcon Telemetry A840 Telemetry Gateway Base Station. It allows man-in-the-middle attackers to spoof devices and obtai...
