Vigil@nce vulnerabilities - watch on computer security


we track for your security since 1999

home

Vigil@nce team describes computer vulnerabilities impacting your systems, and offers solutions.

Each user customizes the list of products to track.

As soon as Vigil@nce publishes an alert for one of these products, the user receives a bulletin, containing an helpful explanation of the threat, its patches and workarounds.

The administrator then uses the online Vigil@nce diary in order to plan and track the security process.

Next page...

public vulnerabilities

2	SAP NetWeaver: Cross Site Scripting of SLD An attacker can generate two Cross Site Scripting in SAP NetWaver SLD, in order to execute script in the web context of a user visiting the site.
2	JBoss: privilege elevation via ESB In some cases, data of a service using the ESB component can be processed with incorrect privileges.
1	GNOME Display Manager: reading password When a GNOME Display Manager user entered a password containing a special character, it is displayed in a log file.
2	Linux kernel: file access via BTRFS_IOC_CLONE On a btrfs filesystem, a local attacker can use BTRFS_IOC_CLONE, in order to read or write a file.*
2	SAP NetWeaver: Cross Site Scripting of Web Services Navigator An attacker can generate a Cross Site Scripting in SAP J2EE Web Services Navigator, in order to execute script in the web context of a user visiting the site.
3	libopie: overflow of one byte An attacker can use a special login name, in order to generate an overflow of one byte in applications linked to libopie, leading to a denial of service, and possibly to code execution.
2	AIX: information disclosure via FTP NLST An attacker can use the FTP NLST (or LIST) command, in order to force the ftpd daemon to generate a coredump, containing sensitive information.
1	iputils: denial of service of ping A server can send a malicious ICMP reply, in order to generate an infinite loop in the ping tool.
1	Apache Tomcat: command execution via SSI When the SSI feature is enabled, the "exec" directive is also enabled, so an attacker allowed to upload a malicious page can execute code on the server.
2	Joomla: four vulnerabilities An attacker can generate three Cross Site Scripting and a SQL injection in Joomla.

recent vulnerabilities

1	Apache httpd: data reading via mod_proxy When mod_proxy is installed Unix, an attacker can obtain documents belonging to the session of another user.
2	Wireshark 1.2: four vulnerabilities Several vulnerabilities of Wireshark can be used by a remote attacker to create a denial of service or to execute code.
2	Wireshark 1.0: two vulnerabilities Several vulnerabilities of Wireshark can be used by a remote attacker to create a denial of service or to execute code.
3	TYPO3: several vulnerabilities Several vulnerabilities of TYPO3 can be used by an attacker to obtain or alter information, or to execute code.
2	SPIP: Cross Site Scripting of informer_auteur An attacker can generate a Cross Site Scripting in the SPIP informer_auteur page, in order to execute JavaScript code in the context of the web browser of visitors.
3	Lotus Notes: vulnerabilities of Autonomy KeyView An attacker can use several vulnerabilities of Autonomy KeyView, in order to execute code in Lotus Notes.
3	Symantec Mail Security: vulnerabilities of Autonomy KeyView An attacker can use several vulnerabilities of Autonomy KeyView, in order to execute code in Symantec Mail Security.
1	GNOME Display Manager: reading password When a GNOME Display Manager user entered a password containing a special character, it is displayed in a log file.
2	Tivoli Storage Manager: vulnerabilities de DB2 Four vulnerabilities of IBM DB2 impact IBM Tivoli Storage Manager Server.
2	Nessus: vulnerabilities of Web Server An attacker can generate a Cross Site Scripting and obtain the version of Nessus Web Server.

Vulnerabilities are discovered daily and published on thousands of internet information sources.
Vigil@nce describes these vulnerabilities and how to protect your system. This information is customized according to your environment and is available on a web site or sent by alert e-mails.
Your team secures and protects your networks based on information and advice from our team.

your security watch

a database containing over 8000 vulnerabilities and 16000 solutions
a web access, to read descriptive information and use advanced search features
alert and synthesis e-mails, to inform your teams
a customized tracking service addressing software and products of your information system
a work space where each user selects his preferences
a diary to plan and track the securization process of each platform
ten options in response to your specific needs

your benefits

a customized watch on computer vulnerabilities and their solutions
an experienced team at your service since 10 years
a tool to monitor the security process of your networks and computers
your team saves time in vulnerabilities research and concentrates on important tasks
a CVE compatible solution