Vigil@nce - technological watch on vulnerabilities and security


we track for your security since 1999

home

Vigil@nce describes vulnerabilities impacting your systems, and offers solutions.

Each user customizes the list of products to track.

As soon as Vigil@nce publishes an alert for one of these products, the user receives a bulletin, containing an helpful explanation of the threat, its patches and workarounds.

The administrator then uses the online Vigil@nce diary in order to plan and track the security process.

Next page...

public vulnerabilities

2	Lotus Domino: Cross Site Scripting of help An attacker can invite the victim to display a malicious url, in order to execute JavaScript code in the context of the Lotus Domino server.
2	Opera: two vulnerabilities Two vulnerabilities were announced in Opera. The first one can be used to inject data in a TLS session.
2	TYPO3: SQL injection in Calendar Base An attacker can inject SQL queries in the Calendar Base extension of TYPO3.
1	ncpfs: two vulnerabilities A local attacker can use two vulnerabilities of ncpfs, in order to obtain information or to create a denial of service.
2	Lotus iNotes: 2 vulnerabilities Two vulnerabilities were announced in Lotus iNotes (DWA, Domino Web Access).
2	PHP 5.2: several vulnerabilities An attacker can use several vulnerabilities of PHP in order to bypass file access restrictions.
3	PowerDNS Recursor: two vulnerabilities An attacker can generate a buffer overflow or change records of PowerDNS Recursor.
1	Linux kernel: denial of service via hvc_console A local attacker can use virtio_console, in order to generate a denial of service in hvc_console.
2	Asterisk: bypassing ACLs An attacker, who is normally blocked by ACLs, can send SIP INVITE messages to Asterisk.
2	GNU M4: file modification via dist and distcheck When the dist and distcheck targets of GNU M4 are used, a local attacker can alter a file.

recent vulnerabilities

3	IE 6, 7: code execution via iepeers.dll An attacker can create an HTML page forcing the usage of a freed memory area in iepeers.dll, which leads to code execution.
3	Excel: several vulnerabilities An attacker can invite the victim to open a malicious Excel document, in order to execute code on his computer.
3	Windows: code execution via Movie Maker and Producer An attacker can invite the victim to open a malicious document with Windows Movie Maker or Microsoft Producer 2003, in order to generate a buffer overflow leading to code execution.
3	HP Performance Insight: code execution A remote attacker can execute code in HP OpenView Performance Insight.
2	AIX: buffer overflow of qoslist and qosmod A local attacker can generate an overflow in the qoslist and qosmod commands, in order to elevate his privileges.
3	Samba: file access via CAP_DAC_OVERRIDE The smbd daemon of Samba inherits the CAP_DAC_OVERRIDE capability, which can be used by an user to bypass file access restrictions.
3	SpamAssassin Milter: command execution When SpamAssassin Milter expands email addresses, a remote attacker can execute commands on the system.
2	OpenSSL: buffer overflow via bn_wexpand The OpenSSL library does not check the error code of the bn_wexpand() function, which can generate a denial of service, or lead to code execution.
1	ncpfs: two vulnerabilities A local attacker can use two vulnerabilities of ncpfs, in order to obtain information or to create a denial of service.
2	FreeBSD, NetBSD, OpenBSD: denial of service of ftpd An attacker can use the LIST command, in order to force ftpd to dereference a NULL pointer, which stops it.

Vulnerabilities are discovered daily and published on thousands of internet information sources.
Vigil@nce describes these vulnerabilities and how to protect your system. This information is customized according to your environment and is available on a web site or sent by alert e-mails.
Your team secures and protects your networks based on information and advice from our team.

your security watch

a database containing over 8000 vulnerabilities and 16000 solutions
a web access, to read descriptive information and use advanced search features
alert and synthesis e-mails, to inform your teams
a customized tracking service addressing software and products of your information system
a work space where each user selects his preferences
a diary to plan and track the securization process of each platform
ten options in response to your specific needs

your benefits

a customized watch on computer vulnerabilities and their solutions
an experienced team at your service since 10 years
a tool to monitor the security process of your networks and computers
your team saves time in vulnerabilities research and concentrates on important tasks
a CVE compatible solution