Oracle Database TNS Listener Service Registration Authentication Weakness (CVE-2012-1675)

An authentication weakness vulnerability has been reported in Oracle Database's TNS listener component...

CVE-2012-2742

The vulnerability (CVE-2012-2742) affects Revelation password manager, specifically versions 0.4.13-2 and earlier. The root cause is that the software uses only the first 32 characters of a password and then pads with zeros, reducing entropy. This can make context-dependent brute-force attacks mo...

CVE-2012-2821: Undefined Security Weakness

The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors...

RHEL 5 / 6 : postgresql and postgresql84 (RHSA-2012:1037)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1037 advisory. - BSD crypt: DES encrypted password weakness CVE-2012-2143 - postgresql: Ability of database owners to install procedural languages via...

crypt(): DES encrypted password weakness

The cryptdes aka DES-based crypt function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an...

PHP 5.4.x < 5.4.4 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is 5.4.x earlier than 5.4.4, and as such is potentially affected the following vulnerabilities : - An integer overflow error exists in the function 'pharparsetarfile' in the file 'ext/phar/tar.c'. This error can lead to a...

rack-cache Rubygem Sensitive HTTP Header Caching Weakness

Rack::Cache rack-cache contains a flaw related to the rubygem caching sensitive HTTP headers. This will result in a weakness that may make it easier for an attacker to gain access to a user's session via a specially crafted header...

Check Point response to "libcrypt 'crypt()' Password Encryption Weakness" (CVE-2012-2143)

...

CVE-2011-3101: Undefined Security Weakness

Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which has unknown impact and attack vectors. NOTE: see CVE-2012-3105 for the related MFSA 2012-34 issue in Mozilla products...

CVE-2011-3079: Undefined Security Weakness

The Inter-process Communication IPC implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors...

CVE-2012-2400: Undefined Security Weakness

Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vectors...

Teen's Arrest Underscores Need for More Secure Web Development

A 15-year-old who claimed he was bored when he turned to hacking was arrested for breaking into almost 260 companies during the first three months of this year, according to a ZDNet article published earlier today. Austria’s Federal Criminal Police Office said the teenager, who used the hacker...

Multiple Vendor Products Security Vulnerabilities

Quantum Scalar i500, Dell ML6000, and IBM TS3310 are prone to following vulnerabilities: 1. An information-disclosure vulnerability 2. A cross-site scripting vulnerability 3. A cross-site request-forgery vulnerability 4. A security-bypass vulnerability An attacker may leverage these issues to...

IBM DB2 'nodes.reg' Permission Weakness Vulnerability

The host is running IBM DB2 and is prone to permission weakness vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2nodespermweakvuln.nasl 5963 2017-04-18 09:02:14Z teissa $ IBM DB2 'nodes.reg' Permission Weakness Vulnerability Authors: Madhuri D Copyright: Copyright c 2012 Greenbone Networks...

IBM Db2 'nodes.reg' Permission Weakness Vulnerability

IBM Db2 is prone to a permission weakness vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...

openssl security and bug fix update

1.0.0-20.3 - fix problem with the SGC restart patch that might terminate handshake incorrectly - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS7 code 802725 - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers 802489...

CVE-2012-1774: Undefined Security Weakness

Unspecified vulnerability in the Open URL feature in Gretech GOM Media Player before 2.1.39.5101 has unknown impact and attack vectors, a different vulnerability than CVE-2007-5779 and CVE-2012-1264...

CVE-2012-1484: Undefined Security Weakness

Unspecified vulnerability in the WaliSMS CN cn.com.wali.walisms application 2.9.2 and 3.7.0 for Android has unknown impact and attack vectors...

CVE-2012-1481: Undefined Security Weakness

Unspecified vulnerability in the Textdroid com.app.android.textdroid application 2.5.2 for Android has unknown impact and attack vectors...

CVE-2012-1485: Undefined Security Weakness

Unspecified vulnerability in the NetFront Life Browser com.accesscompany.android.nflifebrowser.lite application 2.2.0 and 2.3.0 for Android has unknown impact and attack vectors...