Cloud Security

TestLink 'execsetresults. php' php Object Injection Vulnerability Release date:Updated on: Affected Systems:TestLinkDescription:Bugtraq id: 70711CVE (CAN) ID: CVE-2014-8081 Testlink is an open-source test management tool written in PHP. A Remote

FreeBSD routed Denial of Service Vulnerability (CVE-2014-3955) Release date:Updated on: Affected Systems:FreeBSD 9.3FreeBSD 9.2FreeBSD 9.1Description:CVE (CAN) ID: CVE-2014-3955 FreeBSD is a UNIX operating system and an important branch of Unix

Pidgin DoS Vulnerability (CVE-2014-3696) Release date:Updated on: Affected Systems:Pidgin PidginDescription:Bugtraq id: 70705CVE (CAN) ID: CVE-2014-3696 Pidgin is a multi-in-One world mainstream instant messaging software integration tool. When

Linux Kernel KVM DoS Vulnerability (CVE-2014-3611) Release date:Updated on: Affected Systems:Linux kernel 3.16.0Linux kernelDescription:Bugtraq id: 70743CVE (CAN) ID: CVE-2014-3611 Linux Kernel is the Kernel of the Linux operating system. In

OpenStack Compute (Nova) VMware Driver DoS Vulnerability Release date:Updated on: Affected Systems:Openstack NovaDescription:Bugtraq id: 70656 OpenStack Compute (Nova) is a cloud computing constructor written in Python and is part of the laaS

SSL 3.0 POODLE attack information leakage Vulnerability (CVE-2014-3566) Release date:Updated on: Affected Systems:Netscape ssl 3.0Netscape tlsUnaffected system:Netscape tls 1.2Netscape tls 1.1Netscape tls 1.0Description:CVE (CAN) ID:

OpenSSL vulnerability (CVE-2014-3513) Release date:Updated on: Affected Systems:OpenSSL Project OpenSSL Description:Bugtraq id: 70584CVE (CAN) ID: CVE-2014-3513 OpenSSL is an open-source SSL implementation that implements high-strength encryption

TigerVNC NULL pointer indirect reference Denial of Service Vulnerability Release date:Updated on: Affected Systems:TigerVNCDescription:Bugtraq id: 70390 TigerVNC is an advanced VNC implementation. The implementation of TigerVNC has a denial of

Bugzilla Information Leakage Vulnerability (CVE-2014-1571) Release date: 2014-10-09Updated on: 2014-10-09 Affected Systems:Bugzilla 4.5.1-4.5.5Bugzilla 4.3.1-4.4.5Bugzilla 4.1.1-4.2.10Bugzilla 2.17.1-4.0.14Unaffected system:Bugzilla 4.5.6Bugzilla 4.4

Bugzilla XSS Vulnerability (CVE-2014-1573) Release date: 2014-10-09Updated on: 2014-10-09 Affected Systems:Bugzilla 4.5.1-4.5.5Bugzilla 4.3.1-4.4.5Bugzilla 4.1.1-4.2.10Bugzilla 2.17.1-4.0.14Unaffected system:Bugzilla 4.5.6Bugzilla 4.4.6Bugzilla 4.2.1

WordPress Content Audit 'Options-general. php' SQL Injection Vulnerability Release date: 2014-10-02Updated on: Affected Systems:WordPress Content AuditDescription:Bugtraq id: 70214CVE (CAN) ID: CVE-2014-5389 The WordPress Content Audit plug-in

Runmai International Water card can be copied and tampered with without limit to allow free use of water (RF card design security risks) Runmai International Water card (which exists in some communities in Beijing) has the defect that the card data

Paladi/Huawei/Jiangnan tian'an bastion host high-risk vulnerabilities Leak User server passwords The Paladi bastion host product is designed with a security vulnerability. Anyone who can access port 443 can obtain the SSH/TELNET/ORACLE account

Precautions for CentOS server security 1. disable root remote logon if possible, and use a common account to remotely log on, and then switch to root for routine operations. 2. the passwords of root users and other users must be complex. 3. Modify

TerraMaster NAS high-risk network storage Vulnerability TerraMaster is a professional international storage brand dedicated to providing professional private cloud storage devices for global users, it includes high-performance, secure, reliable,

Baidu search storage XSS Vulnerability 1. Items searched in Baidu will be left with search history records in Baidu's personal Center 2. So I search  http://www.baidu.com/s?wd=%22onmouseover

Ecmall: a third round of SQL Injection Although the anti-injection code is added to the anti-injection patch of 20140618, it can be barely bypassed. In app/my_goods.app.php  Function edit (){$ Id = empty ($ _ GET ['id'])? 0: intval ($ _ GET

Cms # SQL Injection # stored xss CMS vendor: Jiangsu Xinyue Technology Co., http://www.jsxyidc.com/   Then download it back for local TestingAn online registration is found:  http://localhost:58031/online.asp In:Name-Date of birth-willingness to

A phpdisk code design defect causes SQL Injection Vulnerability version: PHPDisk F-Core Series Test version: PHPDisk F-Core v1.1 20140703SQL injection is triggered when resources are released. The parameter post_tag is the injection point and the

Soudog pinyin-SQL blind injection and reflective XSS The reflected XSS is one. We recommend that you look for the storage type: Http://pinyin.sogou.com//wurehanzi/libs/Pagination/examples/ArrayData.php? Page = 1' % 22 () % 26% 25 Blind note,