[security bulletin] HPESBHF03766 rev.1 - HPE ConvergedSystem 700 Solution with Comware v5 Switches using NTP, Remote Denial of Service (DoS), Unauthorized Modification and Local Denial of Service (DoS

2017-07-20 Thread security-alert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Note: the current version of the following document is available here: https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03766en_us SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: hpesbhf03766en_us Version: 1 HPESBHF03

File Upload in Integration Gateway (PSIGW)

2017-07-20 Thread ERPScan inc
1. ADVISORY INFORMATION Title: File Upload in Integration Gateway (PSIGW) Advisory ID: [ERPSCAN-17-039] Advisory URL: https://erpscan.com/advisories/erpscan-17-039-file-upload-integration-gateway-psigw-peoplesoft/ Risk: High Date published: 18.07.2017 Vendor contacted: Oracle 2. VULNERABILITY IN

Multiple XSS (POST request) Vulnerabilities in TestServlet (PeopleSoft)

2017-07-20 Thread ERPScan inc
1. ADVISORY INFORMATION Title: Multiple XSS (POST request) Vulnerabilities in TestServlet (PeopleSoft) Advisory ID: [ERPSCAN-17-037] Advisory URL: https://erpscan.com/advisories/erpscan-17-037-multiple-xss-vulnerabilities-testservlet-peoplesoft/ Risk: Medium Date published: 18.07.2017 Vendor cont

Directory Traversal vulnerability in Integration Gateway (PSIGW)

2017-07-20 Thread ERPScan inc
1. ADVISORY INFORMATION Title: Directory Traversal vulnerability in Integration Gateway (PSIGW) Advisory ID: [ERPSCAN-17-038] Advisory URL: https://erpscan.com/advisories/erpscan-17-038-directory-traversal-vulnerability-integration-gateway-psigw/ Risk: High Date published: 18.07.2017 Vendor conta

APPLE-SA-2017-07-19-7 iCloud for Windows 6.2.2

2017-07-20 Thread Apple Product Security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 APPLE-SA-2017-07-19-7 iCloud for Windows 6.2.2 iCloud for Windows 6.2.2 is now available and addresses the following: libxml2 Available for: Windows 7 and later Impact: Parsing a maliciously crafted XML document may lead to disclosure of user info

APPLE-SA-2017-07-19-5 Safari 10.1.2

2017-07-20 Thread Apple Product Security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 APPLE-SA-2017-07-19-5 Safari 10.1.2 Safari 10.1.2 is now available and addresses the following: Safari Available for: OS X Yosemite 10.10.5, OS X El Capitan 10.11.6, and macOS Sierra 10.12.6 Impact: Processing maliciously crafted web content may l