NIST Site Search
Google
Web NIST.org
NIST.gov
Product Research

Advertise on this site
Headlines

»Excel Invalid Object
A remote code execution vulnerability exists within Microsoft Excel which may allow for a remote att ...
»Adobe PDF Buffer Overflow
A vulnerability exists within Adobe Acrobat that allows an attacker to execute arbitrary code on a v ...
»Creative Software AutoUpdate Engine ActiveX stack buffer overflow
The Creative Software AutoUpdate Engine ActiveX control is a component that provides automatic updat ...
»Internet Connection Sharing DoS
A denial of service vulnerability exists within the Internet Connection Sharing service in Microsoft ...
»RPC Memory Exhaustion
The three referenced exploits take advantage of an inherent problem in RPC, in which an attacker get ...


Date published: Thu, 2 Jul 2009 19:43:00 PST
Details

»News: FTC persuades court to shutter rogue ISP
FTC persuades court to shutter rogue ISP
»News: Obama launches cybersecurity initiative
Obama launches cybersecurity initiative
»News: Browsers bashed first in hacking contest
Browsers bashed first in hacking contest

>> Advertisement <<
Can you an ...
»News: Experts: U.S. needs to defend its "cyber turf"
Experts: U.S. needs to defend its "cyber turf"
»Brief: Mozilla adds more privacy in Firefox 3.5
Mozilla adds more privacy in Firefox 3.5


Date published: not known
Details

»Mozilla’s Content Security Policy
Some of you who have been following my blog over the last 3+ years may recall me talking about Conte ...
»CSRF And Ignoring Basic/Digest Auth
One of the single most annoying things about CSRF and router hacking etc… is that you get the ...
»Greater Precision in Timing Attacks Using DoS
Because of all of the stuff that happened over the last week or so regarding Slowloris, I started th ...
»Detecting MITM/Hacking Proxies Via SSL
There are several different ways for MITM/hacking proxies to handle SSL. They can create a self sig ...
»HTTP Longevity During DoS
One of the things I noticed early on in my testing of Slowloris was that not every server reacted li ...
»Slowloris HTTP DoS
UPDATE: Amit Klein pointed me to a post written by Adrian Ilarion Ciobanu written in early 2007 that ...


Date published: not known
Details

»Mozilla Foundation Releases Firefox 3.5
»Spam, Phishing, and Malicious Code Related to Recent Celebrity Deaths
»Adobe Releases Update for Shockwave Player
»Foxit Reader Contains Multiple Vulnerabilities
»Apple Releases iPhone OS 3.0
»Apple Releases Java Updates for Mac OS X 10.4 and 10.5
»Mozilla Foundation Releases Firefox 3.0.11
»Adobe Releases Security Updates for Adobe Reader and Acrobat
»Microsoft Releases June Security Bulletin
»Apple Releases Safari 4.0


Date published: not known
Details




Date published: not known
Details

»July issue of VB published
The July issue of Virus Bulletin is now available for subscribers to download.
»DKIM usage shows significant growth
US banks urged to use authentication method
»Latest AV-Comparatives results released
Retrospective figures follow up February test.
»Cyber-security organisations link up to foster collaboration
ASC, NCSA and StopBadware form 'chain of trust' initiative.
»Gumblar compromise growth continues
Dominant web threat infecting still more vulnerable sites.
»McAfee to acquire Solidcore
Whitelisting firm to be assimilated by security giant.


Date published: not known
Details

»Month Of Twitter Bugs Goes Live With Mini-URL Flaws
Researcher launches Day One of daily third-party Twitter app vulnerability disclosures, while some m ...
»'Mafiaboy': Cloud Computing Will Cause Internet Security Meltdown
Notorious black-hat hacker warns that cloud-based computing will be "extremely dangerous," ...
»NAC Appliances Hardest Hit In Network Security By Economic Downturn, Report Says
Infonetics expects a struggling NAC appliance market to rebound big-time by 2013, to nearly $700 mil ...
»Tech Insight: Database Security -- The First Three Steps
A guide to locating sensitive data in databases -- and finding a strategy to protect it
»Booming Underground Economy Makes Spam A Hot Commodity, Expert Says
Booming underground markets make spam even easier and more lucrative than before, researcher says ...


Date published: not known
Details

»Defense bill calls for test of telework offices for classified work
Current sites are not equipped with the proper physical and cybersecurity requirements needed for em ...
»Cyber Command creation leaves key details to be addressed
Defense Secretary Robert Gates mandates new organization; operational, budget issues to be sorted ou ...
»Council says government should stop buying new radiation detectors

WASHINGTON (AP) -- The government shouldn't buy more of the new radiation detection machines it's ...

»Guarding Networks

Heightened awareness about the sorry state of cybersecurity might be just what chief informat ...

»VA says it's on schedule to process new education claims on time
New applications and systems are keeping the agency ahead of the incoming claims, but some worry dem ...
»Smaller medical practices get help with electronic records

The Obama administration's implementation of stimulus package incentives intended to spur nationw ...



Date published: Thu, 02 Jul 2009 22:39:09 -0400
Details
Search NIST IT Security
Search For:   Enhanced Query Form
Search In:
 
Results 1 - 8 of 8 in Content
Lotus Notes vulnerable to MS Windows graphics rendering engine bug
IBM's Lotus Notes uses the same vulnerable shimgvw.dll graphics rendering engine file implicated in the Microsoft Security Advisory 912840 to view ima...
Posted on Monday 02 January 2006 - 22:00:00 in

XSS Hall of Shame
...list is no longer being regularly maintained. XSS vulnerabilities come and go so quickly it is impossible to keep up. This page will remain for educat...
Posted on Tuesday 31 March 2009 - 00:00:00 in

Microsoft’s Zero Day Event
... it involves Microsoft, and like many such recent vulnerabilities the problem is with Internet Explorer Microsoft’s Zero Day Event A Zero Day ...
Posted on Sunday 04 December 2005 - 23:33:18 in

Vulnerabilities
Vulnerabilities that have long lasting IT Security affects for a large number of systems.
Posted on Friday 20 January 2006 - 22:27:21 in

NIST SP 800-40 v2 Creating a Patch and Vulnerability Management Program
Patch and vulnerability management is a security practice designed to proactively prevent the exploitation of IT vulnerabilities that exist within an ...
Posted on Saturday 21 January 2006 - 22:00:00 in

Non-Encrypted Hall of Shame
...ed is meaningless, without encryption the data is vulnerable. August 5, 2006 – Denver Business Journal Matrix Bancorp Inc. – Two laptops...
Posted on Wednesday 10 October 2007 - 19:55:58 in

NIST SP 800-48 Wireless Network Security
...acks on other networks. Specific threats and vulnerabilities to wireless networks and handheld devices include the following: *All the vuln...
Posted on Tuesday 17 January 2006 - 22:00:00 in

"Drop My Rights" - method to reduce harm while web surfing
...here, though. The past six months have seen major vulnerabilities in Firefox too, and its adoption has slowed. Some people are beginning to question t...
Posted on Sunday 04 December 2005 - 23:50:12 in

Results 1 - 1 of 1 in Links
Vulnerabiity Alerts | Secunia.com
Perhaps the best source of information on current vulnerabilities. They've also been spot on many times on their risk ratings.
http://secunia.com/advisories/

Results 1 - 10 of 153 in News
Month of PHP Bugs part 2 – Bug Opens Thousands more Servers to XSS Vulnerabilities
...info, cross, site, scripting, xss, google, inurl, vulnerabilities, http, headers, ha, ckers, org, recon, mysql, regression, Stefan, Esser@@@ To ...
Posted on Tuesday 06 March 2007 - 15:54:53

Firefox 3.0 Vulnerabilities, 2.0.x Also Vulnerable
... firewalls are likely to soon detect and stop any exploits. The Neohapsis Full-Disclosure security mailing list is reporting a separate FF3 vulne...
Posted on Saturday 21 June 2008 - 10:27:49

Highly Critical and Extremely Critical Vulnerabilities in Lotus Notes and Apple Quicktime
...me, lotus 123, extremely critical, vulnerability, vulnerabilities, viewer, worksheet, ibm, secunia, frsirt, rtsp, buffer overflow, content-type, explo...
Posted on Thursday 29 November 2007 - 04:35:47

Zero-Day MS Office Exploit in the wild, Excel files currently being used.
...y, cve, 2007, 0671, excel, code, windows, server, vulnerabilities, nist, security, bulletin, patch, sans, org, vu, 166700@@@ From the Microsoft ...
Posted on Sunday 04 February 2007 - 21:53:09

Critical Vulnerabilities in Adobe Reader and MS Word
Adobe Reader and Microsoft Word have announced critical vulnerabilities that can lead to allow execution of arbitrary executable code. // @@@micr...
Posted on Thursday 07 December 2006 - 14:48:20

Google Search Appliance Vulnerable to Cross-Site Scripting (XSS)
...ode, vulnerable, phishing, phish, ha, ckers, org, vulnerabilities, nist, box, security, gov, cuna, mutual, fda, us, cert, bulletin, patch, advisory, p...
Posted on Sunday 26 November 2006 - 20:07:29

Yet another PowerPoint 0day Exploit (9-27-06)
... office, 0day, zero, day, exploit, code, windows, vulnerabilities, nist, security, mcafee, bulletin, patch, microsoft, blog, advisory, 2000, xp, 2003,...
Posted on Thursday 28 September 2006 - 03:50:10

More OS X Vulnerabilities and Exploits
Several new Mac OS X vulnerabilities are being reported. Some have PoC exploit code available on the web. The vulnerabilities include Denial of Servi...
Posted on Saturday 22 April 2006 - 10:24:19

0day PowerPoint Exploit Released
..., point, exploit, MS, microsoft, office, windows, vulnerabilities, nist, security, bulletin, patch, advisory, excel, IDS, IPS, hacked@@@ Last mo...
Posted on Friday 14 July 2006 - 04:11:50

Cross-Site Scripting (XSS) - The Internet is Definitely a More Dangerous Place
..., scripting, exploit, code, security, javascript, vulnerabilities, vulnerable, server, exploited, reflected, hackers, forms, fix, programming, jeremia...
Posted on Monday 09 October 2006 - 15:35:01

Go to page       >>  
Results 1 - 9 of 9 in Forum
As part of thread: WMF---Still vulnerable?
The Microsoft patch for the WMF vulnerability has now been out there for more than 10 days. However, we believe that most of the vulnerable Windows ma...
Posted by Meehowski on Monday 16 January 2006 - 14:33:48

As part of thread: Microsoft's 0day "window()" Arbitrary Code Execution Vulnerability
... it involves Microsoft, and like many such recent vulnerabilities the problem is with Internet Explorer Microsoft’s Zero Day Event A Zero ...
Posted by NIST.org on Tuesday 06 December 2005 - 16:18:17

As part of thread: Adding application POA&M Vulnerabilities?
One thing I'm still trying to figure out is how we're doing our POA&M's? We're GSS and host a ton of applications, all of which have their ...
Posted by Mathurin on Tuesday 10 April 2007 - 16:39:54

As part of thread: The Twenty Most Critical Internet Security Vulnerabilities (Updated) ~ The Experts Consensus
http://www.sans.org/top20/
Posted by Meehowski on Wednesday 25 January 2006 - 13:26:58

As part of thread: Encryption Solutions - Whole Disk
... it. Besides being more work it also is much more vulnerable. Unencrypting inevitably leaves unencrypted remnants behind, either in deleted file space...
Posted by NIST.org on Monday 12 June 2006 - 20:23:32

As part of thread: WMF---Still vulnerable?
Steve Gibson at GRC.COM is reporting that he now believes that no Windows 9x computer is vulnerable to having this WMF vulnerability exploited. ...
Posted by Meehowski on Monday 23 January 2006 - 02:35:01

As part of thread: WMF---Still vulnerable?
Steve Gibson at GRC.COM is reporting that he now believes that no Windows 9x computer is vulnerable to having this WMF vulnerability exploited. ...
Posted by NIST.org on Saturday 21 January 2006 - 18:03:31

As part of thread: Microsoft's 0day "window()" Arbitrary Code Execution Vulnerability
Marco, I wish I knew. The reports I've received indicate that Lotus Notes uses the vulnerable shimgwv.dll file to get image information, but not to ...
Posted by NIST.org on Wednesday 04 January 2006 - 17:07:31

As part of thread: Microsoft's 0day "window()" Arbitrary Code Execution Vulnerability
...LN is able to show the WMF image also without the vulnerable DLL. The question is : Is Lotus Notes using the vulnerable DLL in a way that can t...
Posted by VALVAGIO on Wednesday 04 January 2006 - 11:15:03

Results 1 - 9 of 9 in Comments
Posted in reply to news item: $8,000 bounty for Vista and IE7 Vulnerabilities, plus bonuses.
...ctions are complete." But apparently there is a bidding war starting over Vista and IE7 zeroday exploits. < edited 1168991550 >
Posted by NIST.org on Tuesday 16 January 2007 - 15:57:11

Posted in reply to item: Lotus Notes vulnerable to MS Windows graphics rendering engine bug
...hich the exploit code tries to invoke. YMMV - but my 6.5.3 is not vulnerable !! Hope IBM will soon verify/deny this vulnerability!
Posted by deros68 on Thursday 05 January 2006 - 10:27:06

Posted in reply to news item: Extremely Critical New zero-day Windows vulnerability being exploited.
...gs such as canceling print jobs, etc. The current exploits are using the Escape() WMF routine but experts say other routines could also be vulnerable....
Posted by NIST.org on Monday 02 January 2006 - 16:40:15

Posted in reply to news item: RealVNC 4 Exploit Bypasses Authentication - Update: Fix Available
Having grabbed a copy of this exploit for internal testing I was amazed to see how easy it was to take complete control of the target system. If you ...
Posted by minshaw on Tuesday 23 May 2006 - 02:17:14

Posted in reply to news item: Spyware Makers Targeting Enterprises Users
...s attempted to hijack the computers of more than 70 named individuals at the UK Parliament using the recent WMF Exploit. < edited 1138256123 >
Posted by NIST.org on Wednesday 25 January 2006 - 23:14:44

Posted in reply to item: Lotus Notes vulnerable to MS Windows graphics rendering engine bug
Hi John I have performed another test. 1) I have disabled using regsvr32 the vulnerable dll %windir%system32shimgvw.dllshimgvw.dll 2) u...
Posted by VALVAGIO on Thursday 05 January 2006 - 04:15:26

Posted in reply to item: Lotus Notes vulnerable to MS Windows graphics rendering engine bug
... is able to show the WMF image also "without" the vulnerable DLL. The question is : Is Lotus Notes using the vulnerable DLL in a way that can t...
Posted by VALVAGIO on Thursday 05 January 2006 - 02:15:01

Posted in reply to news item: Extremely Critical New zero-day Windows vulnerability being exploited.
From SANS.org "The main vector that the bad guys use to exploit this is still by posting it on web sites." I've been wondering about public forum / b...
Posted by NIST.org on Wednesday 04 January 2006 - 23:06:46

Posted in reply to news item: Extremely Critical New zero-day Windows vulnerability being exploited.
It turns out that Microsoft has had a fix ready for the WMF exploit since 12/28 and has been sitting on it testing it all this time. Steve Gibson at ...
Posted by NIST.org on Wednesday 04 January 2006 - 19:22:14

Results in Other Pages
No matches found
Results in Bugtracker2
No matches found
Translate to: French German Italian Spanish Portuguese GTM_LAN_DUTCH Russian Chinese Arabic Korean English
Google Ads




NIST Site Menu
·Home

Current Security News
 

***

CNET News.com - Security

» Apple fixing iPhone SMS security hole
[02 Jul 2009 03:03pm]

» Waledac worm targeting July 4 spam offensive
[02 Jul 2009 11:49am]

» ATM vendor gets security talk pulled from conferences
[01 Jul 2009 01:30pm]

» Postini: Google's take on e-mail security
[01 Jul 2009 09:00am]

» Botnets lead the way for spam
[01 Jul 2009 07:35am]

» Stallman warns of Mono 'risk'
[30 Jun 2009 01:03pm]

» China delays rule for Net-screening software
[30 Jun 2009 08:58am]

» Swedish company to buy Pirate Bay
[30 Jun 2009 08:25am]

» Photos: NASA's science, tech showcase
[30 Jun 2009 08:00am]

» 'Iceman' pleads guilty in credit card theft case
[29 Jun 2009 05:24pm]

» Watch what Microsoft's new security app can do
[26 Jun 2009 02:16pm]

» Expert: China's Green Dam software is unsafe
[25 Jun 2009 05:48pm]

» Finjan offers free SecureTwitter browser plug-in
[25 Jun 2009 01:41pm]

» U.K. cybersecurity office to have attack role
[25 Jun 2009 11:25am]

» Green Dam exploit in the wild
[25 Jun 2009 11:22am]

***
Computerworld Security News

» Search Party: Why Security Pros Should Master Google
[02 Jul 2009 12:00pm]

» Court orders spammers to pay $3.7 million
[02 Jul 2009 10:01am]

» Mozilla slates first Firefox 3.5 patch
[02 Jul 2009 05:26am]

» 'Jailbroken' iPhones leave users more vulnerable
[02 Jul 2009 04:30am]

» Apple patching serious SMS vulnerability on iPhone
[02 Jul 2009 03:59am]

» Security guard charged with hacking hospital systems
[02 Jul 2009 01:59am]

» More Security News

***
Governmentsecurity.org

» Nervous About The Usenet Riaa Piracy Crackdown
[01 Jul 2009 05:21pm]

» Interesting Computer Security And Hacking Videos
[01 Jul 2009 12:22pm]

» Tools and tricks of the white hat hackers
[30 Jun 2009 03:58pm]

» Hotmail hack blamed for exposing Sanford Affair
[30 Jun 2009 10:36am]

» Google Voice Security And Privacy
[30 Jun 2009 07:12am]

» How to Calculate 4byte DLL Hash?
[30 Jun 2009 06:19am]

» Encrypt Sensitive Data in SQL Server 2005
[30 Jun 2009 06:15am]

» Quantum Secrets: A New Standard in Crytopgraphy?
[26 Jun 2009 11:47pm]

» Security simplified | ThreatChaos - Mozilla Firefox
[26 Jun 2009 09:56pm]

» Darknets Private Internet & File Sharing
[26 Jun 2009 09:07pm]

***


More IT Security
News Feeds
More Sponsors

Advertise on this site
NIST - Books You Need

NIST Bookstore
RSS Feeds
Our news can be syndicated by using these rss feeds.
rss1.0
rss2.0
rdf
Add to NetVibes
Add to Bloglines
Add to NewsGator
Add to Google
Add to My Yahoo
Add to My MSN
Add to Technorati
Add to Pluckit
Add to My AOL
Subscribe in FeedLounge
Add to ProtoPage

Symantec News