[security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities

2017-03-10 Thread security-alert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Note: the current version of the following document is available here: https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbux03706en_us SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: hpesbux03706en_us Version: 1

[security bulletin] HPESBHF03711 rev.1 - HPE 2620 Series Network Switches, Remote Cross Site Request Forgery (CSRF)

2017-03-10 Thread security-alert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Note: the current version of the following document is available here: https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03711en_us SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: hpesbhf03711en_us Version: 1

[security bulletin] HPESBGN03707 rev.1 - HPE ConvergedSystem 700 2.0 VMware Kit, Remote Increase of Privilege

2017-03-10 Thread security-alert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Note: the current version of the following document is available here: https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03707en_us SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: hpesbgn03707en_us Version: 1

[security bulletin] HPESBHF03716 rev.1 - HPE Intelligent Management Center (IMC) PLAT, Remote Authentication Bypass

2017-03-10 Thread security-alert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Note: the current version of the following document is available here: https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03716en_us SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: hpesbhf03716en_us Version: 1

CVE-2016-10143: Vulnerability to read arbitrary files in "Tiki Wiki"

2017-03-10 Thread Leon . Zhao . 7
Credits === Zhao Liang, Huawei Weiran Labs Vendor: === Tiki Product: Tiki Wiki CMS The Tiki Wiki CMS Groupware project (aka TikiWiki or Tiki) is an open source initiative that releases and maintains a powerful OpenSource Content Management