[SECURITY] [DSA 3550-1] openssh security update

2016-04-15 Thread Moritz Muehlenhoff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 - - Debian Security Advisory DSA-3550-1 secur...@debian.org https://www.debian.org/security/ Moritz Muehlenhoff April 15, 2016

Microsoft Internet Explorer 11 MSHTML.DLL Remote Binary Planting Vulnerability

2016-04-15 Thread Sandro Poppi
Abstract Microsoft Internet Explorer 11 MSHTML.DLL Remote Binary Planting Vulnerability Affected Version: MSHTML.DLL 11.0.9600.18231 and probably below on Windows 7 SP1 Vendor Homepage: http://www.microsoft.com Severity: high Status: fixed CVE-ID: CVE-2016-0160 Description --- Mic

[ERPSCAN-16-003] SAP NetWeaver 7.4 - cryptographic issues

2016-04-15 Thread ERPScan inc
Application: SAP NetWeaver Versions Affected: SAP NetWeaver J2EE Engine 7.40 Vendor URL: http://SAP.com Bugs: cryptographic issues Sent: 01.09.2015 Reported: 01.09.2015 Vendor response: 02.09.2015 Date of Public Advisory: 12.01.2016 Reference: SAP Security Note 2191290 Author: Vahagn Vard

[ERPSCAN-16-002] SAP HANA - log injection and no size restriction

2016-04-15 Thread ERPScan inc
Application: SAP HANA Versions Affected: SAP HANA Vendor URL: http://SAP.com Bugs: Log injection Sent:28.09.2015 Reported: 28.09.2015 Vendor response: 29.09.2015 Date of Public Advisory: 12.01.2016 Reference: SAP Security Note 2241978 Author: Mathieu Geli (ERPScan) Description 1.

[ERPSCAN-16-001] SAP NetWeaver 7.4 - XSS vulnerability

2016-04-15 Thread ERPScan inc
Application:SAP NetWeaver Versions Affected: SAP NetWeaver J2EE Engine 7.40 Vendor URL: http://SAP.com Bugs: Cross-Site Scripting Sent: 01.09.2015 Vendor response: 02.09.2015 Date of Public Advisory: 12.01.2016 Reference: SAP Security Note 2206793 Author: Vahagn Vardanyan (ERPScan) Description

[SECURITY] [DSA 3549-1] chromium-browser security update

2016-04-15 Thread Michael Gilbert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - - Debian Security Advisory DSA-3549-1 secur...@debian.org https://www.debian.org/security/ Michael Gilbert April 15, 2016