Microsoft says it's working on a patch for a security vulnerability discovered in some 64-bit versions of Windows and Windows Server, but downplays the risk of system takeovers.
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2014-0244 Input Validation vulnerability
3.3
Samba
Solaris 11.2
11.2.1.5.0
CVE-2014-3493 Buffer Errors vulnerability
2.7
This notification describes vulnerabilities fixed in third-party components that are included in Oracle's product distributions.Information about vulnerabilities affecting Oracle products can be found on Oracle Critical Patch Updates and Security Alerts page.
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2011-2524 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability
5.0
libsoup
Solaris 11
11/11 SRU 11.4
This notification describes vulnerabilities fixed in third-party components that are included in Oracle's product distributions.Information about vulnerabilities affecting Oracle products can be found on Oracle Critical Patch Updates and Security Alerts page.
Pour ou contre la publication en Open Source du code source d'un système de sécurité ?
Une juge estime que cette pratique peut mettre en péril la sécurité nationale Battelle Energy Alliance, fournisseur opérationnel de Idaho National Laboratory (INL), a engagé des poursuites judiciaires contre un de ses anciens employés et sa compagnie Southfork Security. Tout a commencé en 2009 quand le département américain de l'énergie a mandaté un projet de développement dont l'objectif était la création...
SSL (Secure Sockets Layer) is an encrypting modus operandi that ensures the en route security of the personal details processed by the browser to the server. We all know that online shopping is prefe... [Author: Jack Melde - Computers and Internet - May 01, 2010]
Microsoft reacted this week to a claim that its Virtual PC hypervisor contains a security hole....Did you know that DotNetSlackers also publishes .net articles written by top known .net Authors? We already have over 80 articles in several categories including Silverlight. Take a look: here.
I've dropbox v1.4.17 installed and I want to change the path from (...)/Dropbox to (...)/dropbox.
I think until v1.2 this was done by changing dropbox_path field in the sqlite file ~/.dropbox/config.db. Now, this field is hidden inside the encrypted ~/.dropbox/config.dbx (security reasons [1], I guess).
Anyone has a solution to this? I'm thinking about placing my dropbox folder in ~/.local/share/Dropbox and then linking that to the path I want to set.
[1] http://www.youtube.com/watch?v=tqmqtborOSw
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2012-2110 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability
7.5
OpenSSL
Solaris 10
SPARC: 147159-05 147707-06 X86: 146672-07
CVE-2012-2131 Numeric Errors vulnerability
7.5
This notification describes vulnerabilities fixed in third-party components that are included in Sun's product distribution.Information about vulnerabilities affecting Oracle Sun products can be found on Oracle Critical Patch Updates and Security Alerts page.
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2012-2110 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability
7.5
OpenSSL
Solaris 11
Contact Support
Solaris 10
SPARC: 147159-05 147707-06 X86: 146672-07
CVE-2012-2131 Numeric Errors vulnerability
7.5
This notification describes vulnerabilities fixed in third-party components that are included in Sun's product distribution.Information about vulnerabilities affecting Oracle Sun products can be found on Oracle Critical Patch Updates and Security Alerts page.
Security bulletin MS10-036 is designed to fix an "important" vulnerability in Office XP, Office 2003 and Office 2007....Did you know that DotNetSlackers also publishes .net articles written by top known .net Authors? We already have over 80 articles in several categories including Silverlight. Take a look: here.
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2011-1528 Improper Input Validation vulnerability
7.8
Kerberos
Solaris 11.1
11.1
CVE-2011-1529 Improper Input Validation vulnerability
7.8
CVE-2011-4151 Improper Input Validation vulnerability
7.8
This notification describes vulnerabilities fixed in third-party components that are included in Oracle's product distributions.Information about vulnerabilities affecting Oracle products can be found on Oracle Critical Patch Updates and Security Alerts page.
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2011-3439 Denial of Service (DoS) vulnerability
9.3
FreeType Font Engine
Solaris 11
Contact Support
Solaris 10
SPARC: 119812-14 X86: 119813-16
Solaris 9
Contact Support
This notification describes vulnerabilities fixed in third-party components that are included in Sun's product distribution.Information about vulnerabilities affecting Oracle Sun products can be found on Oracle Critical Patch Updates and Security Alerts page.
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2012-3236 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability
4.3
Gimp
Solaris 10
Contact Support
Solaris 11
11/11 SRU 11.4
This notification describes vulnerabilities fixed in third-party components that are included in Oracle's product distributions.Information about vulnerabilities affecting Oracle products can be found on Oracle Critical Patch Updates and Security Alerts page.
Security-software vendors say hackers for months have been repeatedly targeting top-tier executives and government officials using the World Cup soccer tournament as a lure.
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2012-0050 Denial of Service (DoS) vulnerability
5.0
OpenSSL
Solaris 11
11/11 SRU 4a
This notification describes vulnerabilities fixed in third-party components that are included in Sun's product distribution.Information about vulnerabilities affecting Oracle Sun products can be found on Oracle Critical Patch Updates and Security Alerts page.
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2012-2214 Resource Management Errors vulnerability
3.5
Pidgin
Solaris 10
SPARC : 147992-04 , x86 : 147993-04
Solaris 11
11/11 SRU 10.5
CVE-2012-2318 Improper Input Validation vulnerability
5.0
This notification describes vulnerabilities fixed in third-party components that are included in Oracle's product distributions.Information about vulnerabilities affecting Oracle products can be found on Oracle Critical Patch Updates and Security Alerts page.
Before creating a data application in Windows Azure, it is important to make choices based on the type of data you have, as well as the security and the business requirements. There are a wide range of options, because Windows Azure has intrinsic data storage, completely separate from SQL Azure, that is highly available and replicated. Your data requirements are likely to dictate the type of data storage options you choose.
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2012-3401 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability
6.8
libtiff
Solaris 11
11/11 SRU 12.4
Solaris 10
Contact Support
This notification describes vulnerabilities fixed in third-party components that are included in Oracle's product distributions.Information about vulnerabilities affecting Oracle products can be found on Oracle Critical Patch Updates and Security Alerts page.
Just Azure, a new site from Cerebrata (part of Red Gate), provides essential technical resources and educational articles to support the Microsoft community in navigating and understanding the rapidly evolving Azure platform.
Get to grips with SQL Server replicationIn this new eBook Sebastian Meine gives a hands-on introduction to SQL Server replication, including implementation and security. Download free ebook now.
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2011-2728 Denial of Service Vulnerability
4.3
Perl
Solaris 10
SPARC: 146032-03 X86: 146033-03
Solaris 11
11/11 SRU 3
This notification describes vulnerabilities fixed in third-party components that are included in Sun's product distribution.Information about vulnerabilities affecting Oracle Sun products can be found on Oracle Critical Patch Updates and Security Alerts page.
Embedded databases power back-end hardware, business applications, and portable devices everywhere. Find out how Oracle embedded
databases live and work at the core of hardware, software, and other devices—and deliver cash, health, and security.
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2011-3146 Denial of Service (DoS) vulnerability
6.8
librsvg
Solaris 11
11/11 SRU 8.5
This notification describes vulnerabilities fixed in third-party components that are included in Sun's product distribution.Information about vulnerabilities affecting Oracle Sun products can be found on Oracle Critical Patch Updates and Security Alerts page.
<b>Help Net Security:</b> "The latest version of Passware Kit Forensic has become the first commercially available software to break TrueCrypt hard drive encryption without applying a time-consuming brute-force attack. It was also the first product to decrypt BitLocker drives."
CVE DescriptionCVSSv2 Base ScoreComponentProduct and Resolution
CVE-2010-2595 Denial of Service (DoS) vulnerability
4.3
LibTIFF
Solaris 10
SPARC: 119900-13 X86: 119901-12
CVE-2010-4665 Denial of Service (DoS) vulnerability
4.3
CVE-2011-0192 Denial of Service (DoS) vulnerability
9.3
CVE-2011-1167 Buffer Overflow vulnerability
6.8
This notification describes vulnerabilities fixed in third-party components that are included in Sun's product distribution.Information about vulnerabilities affecting Oracle Sun products can be found on Oracle Critical Patch Updates and Security Alerts page.