Debian DSA-3626-1 : openssh - security update

Eddie Harari reported that the OpenSSH SSH daemon allows user enumeration through timing differences when trying to authenticate users. When sshd tries to authenticate a non-existing user, it will pick up a fixed fake password structure with a hash based on the Blowfish algorithm. If real users...

Apache TomEE Version 1.x Detection

Binary data 9321.prm...

[SECURITY] [DLA 455-1] asterisk security update

Package : asterisk Version : 1:1.8.13.1dfsg1-3+deb7u4 CVE ID : CVE-2014-2286 CVE-2014-4046 CVE-2014-6610 CVE-2014-8412 CVE-2014-8418 CVE-2015-3008 Debian Bug : 741313 762164 771463 782411 CVE-2014-6610 Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6...

Security fix for the ALT Linux 8 package dhcpcd version 1:6.10.1-alt1

Jan. 25, 2016 Mikhail Efremov 1:6.10.1-alt1 - Patches from upstream: + Don't allow blank hostname. + Fix CVE-2014-7913. - Drop obsoleted patch. - Updated to 6.10.1...

IBM WebSphere MQ Light Denial of Service Vulnerability

IBM WebSphere MQ Light is an IBM Bluemix-based messaging service from IBM. A security vulnerability exists in version 1.x of IBM WebSphere MQ Light prior to 1.0.2. A remote attacker could exploit the vulnerability to cause a denial of service...

DLA-362-1 dhcpcd - security update

Bulletin has no description...

Threat Outbreak Alert RuleID19449: Email Messages Distributing Malicious Software on November 17, 2015

Medium Alert ID: 42125 First Published: 2015 November 17 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19449 may contain the following files: Name |...

Content Injection via TileJSON attribute

Overview Versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 of mapbox.js are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios. If L.mapbox.map or L.mapbox.tileLayer are used to load untrusted TileJSON content from a non-Mapbox URL, it is possible for a malicious use...

Threat Outbreak Alert RuleID17269: Email Messages Distributing Malicious Software on August 16, 2015

Medium Alert ID: 40535 First Published: 2015 August 17 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17269 may contain the following files: Name |...

OpenSSH 7.0 Fixes Four Flaws

A new version of OpenSSH has been released, fixing four security vulnerabilities and a number of non-security related bugs. OpenSSH 7.0 includes patches for a use-after-free vulnerability and three other flaws, two of which only affect Portable OpenSSH. The maintainers of the software also gave...

Threat Outbreak Alert RuleID16654: Email Messages Distributing Malicious Software on July 14, 2015

Medium Alert ID: 39926 First Published: 2015 July 14 16:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16654 may contain the following files: Name | Siz...

Cisco ASA XAUTH Bypass Vulnerability (Cisco-SA-20150602-CVE-2015-0760)

A vulnerability in IKE version 1 code of Cisco ASA Software could allow an authenticated, remote attacker to bypass Extended Authentication XAUTH and successfully log in via IPsec remote VPN. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

DLA-240-1 libapache-mod-jk - security update

Bulletin has no description...

Threat Outbreak Alert RuleID15798: Email Messages Distributing Malicious Software on June 8, 2015

Medium Alert ID: 39253 First Published: 2015 June 8 19:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15798 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID14632: Email Messages Distributing Malicious Software on April 13, 2015

Medium Alert ID: 38353 First Published: 2015 April 13 12:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14632 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID13548: Email Messages Distributing Malicious Software on February 12, 2015

Medium Alert ID: 37459 First Published: 2015 February 12 19:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13548 may contain the following files: Name |...

DSA-3110-1 mediawiki - security update

Bulletin has no description...

CVE-2014-0222

Integer overflow in the qcowopen function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service crash via a large L2 table in a QCOW version 1 image...

CVE-2014-0222

Integer overflow in the qcowopen function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service crash via a large L2 table in a QCOW version 1 image...

CVE-2014-0222

Integer overflow in the qcowopen function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service crash via a large L2 table in a QCOW version 1 image...