NIST Site Search
Google
Web NIST.org
NIST.gov
Product Research

Advertise on this site
Headlines

»Insecure Loading of Dynamic Link Libraries in Windows Applications
»VMware Releases Updates for ESX Service Console Packages
»Cisco Releases Security Advisory for IOS XR Software Border Gateway Protocol
»RealNetworks Releases Update to Address Vulnerabilities in RealPlayer
»Cisco Releases Advisories for Unified Communications Manager and Unified Presence
»APWG Fax Back Phishing Education Program
»Adobe Releases Security Bulletin for Shockwave Player
»Apple Releases Security Update 2010-005
»Microsoft Releases Security Advisory
»VideoLAN Releases a Security Advisory for VLC Media Player


Date published: not known
Details

»T-430: Apple QuickTime Flaw in QTPlugin.ocx ActiveX Control Lets Remote Users Execute Arbitrary Code
Apple QuickTime Flaw in QTPlugin.ocx ActiveX Control Lets Remote Users Execute Arbitrary Code
»T-429: WaspTime MS-SQL Database instance with blank password for sa account
WaspTime MS-SQL Database instance with blank password for sa account
»T-428: Vulnerability in Help and Support Center
Vulnerability in Help and Support Center
»T-427: VMWare WebAccess Vulnerability
VMWare WebAccess Vulnerability
»T-426: Microsoft Windows Shortcut 'LNK/PIF' Files Automatic File Execution Vulnerability
Microsoft Windows Shortcut 'LNK/PIF' Files Automatic File Execution Vulnerability
»T-425: Desktop Java running in web browsers
Desktop Java running in web browsers
»T-424: Windows TCP/IP Stack IcmpSendEcho2Ex() Bug Lets Local Users Deny Service
Windows TCP/IP Stack IcmpSendEcho2Ex() Bug Lets Local Users Deny Service
»T-423: Microsoft Security Advisory (2269637) - Insecure Library Loading Could Allow Remote Code Execution
Microsoft Security Advisory (2269637) - Insecure Library Loading Could Allow Remote Code Execution
»T-422: Adobe Flash Player and AIR (CVE-2010-2216) Unspecified Memory Corruption Vulnerability
Adobe Flash Player and AIR (CVE-2010-2216) Unspecified Memory Corruption Vulnerability
»T-421: Multiple CACTI Security Vulnerabilities
Multiple CACTI Security Vulnerabilities
»T-420: Microsoft Windows TCP/IP IPv6 Extension Header Remote Denial of Service Vulnerability
Microsoft Windows TCP/IP IPv6 Extension Header Remote Denial of Service Vulnerability
»T-419: PHP 'ibase_gen_id()' Function off-by-one Buffer Overflow Vulnerability
PHP 'ibase_gen_id()' Function off-by-one Buffer Overflow Vulnerability
»T-418: Adobe Acrobat and Reader Font Parsing Remote Code Execution Vulnerability
Adobe Acrobat and Reader Font Parsing Remote Code Execution Vulnerability
»T-417: Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities
Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities
»T-417: Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities
Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities


Date published: not known
Details

»ARF published as IETF standard
Abuse report format helps auto-handling of email complaints
»Microsoft releases new fix for DLL vulnerability
Earlier workaround believed to be too complex for most users.
»Malicious tweets link to fake TweetDeck update
Twitter resets passwords for accounts that appear to have been hacked.
»94% of Internet users befriend unknown 'good-looking woman'
Sensitiva data shared after two-hour chat.
»Investment boost for Quick Heal
Indian security firm gets hefty cash injection.
»41% of spam sent via Rustock botnet
Botnet spam back after short summer break.
»Avast gets $100m investment boost
Growth equity firm invests in Czech firm
»Computer chip giant buys AV giant
Intel becomes new owner of McAfee for the princely sum of $7.8bn
»AV-Test.org issues latest round of testing results
Symantec and Microsoft outdo Trend and McAfee in live tests.


Date published: not known
Details

»Networked Scanners Offer A Window Into The Enterprise, Researcher Says
Emerging Web-based features make it possible to capture document contents remotely from networked sc ...
»U.S. Businesses Could Lose Up To $1 Billion In Online Banking Fraud This Year
Small- to midsized businesses taking the biggest hit, experts say, but consumer banking customers co ...
»Product Watch: Verizon, VMware Team Up With Hybrid Cloud Service
New Verizon service offers private public-cloud option
»Could USB Flash Drives Be Your Enterprise's Weakest Link?
The Pentagon last week conceded that a USB flash drive carried an attack program inside a classified ...
»Delaware Contractor Mistakenly Posts Personal Data Of 22,000 Employees
State of Delaware contractor Aon mistakenly posts personal data of 22,000 retirees without randomiza ...
»IBM Corrects Unpatched Vulnerability Numbers After Google Challenge
X-Force Team at IBM revises data on vendors with most unpatched bugs in recent IBM X-Force 2010 Mid- ...
»Major Disruption of Pushdo Botnet Wasn't The Original Goal
Botnet's spam traffic cut by 80 percent
»China, Taiwan Nab 450 Suspects In Biggest Fraud Raid Ever
Law enforcement authorities in China, Taiwan seize cash, fraud "manuals" from alleged tele ...
»Four Best Practices For Tokenization
Going beyond Visa's best practices guide


Date published: not known
Details
Search NIST IT Security
Search For:   Enhanced Query Form
Search In:
 
Results 1 - 8 of 8 in Content
Lotus Notes vulnerable to MS Windows graphics rendering engine bug
IBM's Lotus Notes uses the same vulnerable shimgvw.dll graphics rendering engine file implicated in the Microsoft Security Advisory 912840 to view ima...
Posted on Monday 02 January 2006 - 22:00:00 in

XSS Hall of Shame
...list is no longer being regularly maintained. XSS vulnerabilities come and go so quickly it is impossible to keep up. This page will remain for educat...
Posted on Tuesday 31 March 2009 - 00:00:00 in

Microsoft’s Zero Day Event
... it involves Microsoft, and like many such recent vulnerabilities the problem is with Internet Explorer Microsoft’s Zero Day Event A Zero Day ...
Posted on Sunday 04 December 2005 - 23:33:18 in

Vulnerabilities
Vulnerabilities that have long lasting IT Security affects for a large number of systems.
Posted on Friday 20 January 2006 - 22:27:21 in

NIST SP 800-40 v2 Creating a Patch and Vulnerability Management Program
Patch and vulnerability management is a security practice designed to proactively prevent the exploitation of IT vulnerabilities that exist within an ...
Posted on Saturday 21 January 2006 - 22:00:00 in

Non-Encrypted Hall of Shame
...ed is meaningless, without encryption the data is vulnerable. August 5, 2006 – Denver Business Journal Matrix Bancorp Inc. – Two laptops...
Posted on Wednesday 10 October 2007 - 19:55:58 in

NIST SP 800-48 Wireless Network Security
...acks on other networks. Specific threats and vulnerabilities to wireless networks and handheld devices include the following: *All the vuln...
Posted on Tuesday 17 January 2006 - 22:00:00 in

"Drop My Rights" - method to reduce harm while web surfing
...here, though. The past six months have seen major vulnerabilities in Firefox too, and its adoption has slowed. Some people are beginning to question t...
Posted on Sunday 04 December 2005 - 23:50:12 in

Results 1 - 1 of 1 in Links
Vulnerabiity Alerts | Secunia.com
Perhaps the best source of information on current vulnerabilities. They've also been spot on many times on their risk ratings.
http://secunia.com/advisories/

Results 1 - 10 of 155 in News
Month of PHP Bugs part 2 – Bug Opens Thousands more Servers to XSS Vulnerabilities
...info, cross, site, scripting, xss, google, inurl, vulnerabilities, http, headers, ha, ckers, org, recon, mysql, regression, Stefan, Esser@@@ To ...
Posted on Tuesday 06 March 2007 - 15:54:53

Firefox 3.0 Vulnerabilities, 2.0.x Also Vulnerable
... firewalls are likely to soon detect and stop any exploits. The Neohapsis Full-Disclosure security mailing list is reporting a separate FF3 vulne...
Posted on Saturday 21 June 2008 - 10:27:49

Highly Critical and Extremely Critical Vulnerabilities in Lotus Notes and Apple Quicktime
...me, lotus 123, extremely critical, vulnerability, vulnerabilities, viewer, worksheet, ibm, secunia, frsirt, rtsp, buffer overflow, content-type, explo...
Posted on Thursday 29 November 2007 - 04:35:47

Zero-Day MS Office Exploit in the wild, Excel files currently being used.
...y, cve, 2007, 0671, excel, code, windows, server, vulnerabilities, nist, security, bulletin, patch, sans, org, vu, 166700@@@ From the Microsoft ...
Posted on Sunday 04 February 2007 - 21:53:09

Critical Vulnerabilities in Adobe Reader and MS Word
Adobe Reader and Microsoft Word have announced critical vulnerabilities that can lead to allow execution of arbitrary executable code. // @@@micr...
Posted on Thursday 07 December 2006 - 14:48:20

Google Search Appliance Vulnerable to Cross-Site Scripting (XSS)
...ode, vulnerable, phishing, phish, ha, ckers, org, vulnerabilities, nist, box, security, gov, cuna, mutual, fda, us, cert, bulletin, patch, advisory, p...
Posted on Sunday 26 November 2006 - 20:07:29

Yet another PowerPoint 0day Exploit (9-27-06)
... office, 0day, zero, day, exploit, code, windows, vulnerabilities, nist, security, mcafee, bulletin, patch, microsoft, blog, advisory, 2000, xp, 2003,...
Posted on Thursday 28 September 2006 - 03:50:10

More OS X Vulnerabilities and Exploits
Several new Mac OS X vulnerabilities are being reported. Some have PoC exploit code available on the web. The vulnerabilities include Denial of Servi...
Posted on Saturday 22 April 2006 - 10:24:19

0day PowerPoint Exploit Released
..., point, exploit, MS, microsoft, office, windows, vulnerabilities, nist, security, bulletin, patch, advisory, excel, IDS, IPS, hacked@@@ Last mo...
Posted on Friday 14 July 2006 - 04:11:50

Cross-Site Scripting (XSS) - The Internet is Definitely a More Dangerous Place
..., scripting, exploit, code, security, javascript, vulnerabilities, vulnerable, server, exploited, reflected, hackers, forms, fix, programming, jeremia...
Posted on Monday 09 October 2006 - 15:35:01

Go to page       >>  
Results 1 - 9 of 9 in Forum
As part of thread: WMF---Still vulnerable?
The Microsoft patch for the WMF vulnerability has now been out there for more than 10 days. However, we believe that most of the vulnerable Windows ma...
Posted by Meehowski on Monday 16 January 2006 - 14:33:48

As part of thread: Microsoft's 0day "window()" Arbitrary Code Execution Vulnerability
... it involves Microsoft, and like many such recent vulnerabilities the problem is with Internet Explorer Microsoft’s Zero Day Event A Zero ...
Posted by NIST.org on Tuesday 06 December 2005 - 16:18:17

As part of thread: Adding application POA&M Vulnerabilities?
One thing I'm still trying to figure out is how we're doing our POA&M's? We're GSS and host a ton of applications, all of which have their ...
Posted by Mathurin on Tuesday 10 April 2007 - 16:39:54

As part of thread: The Twenty Most Critical Internet Security Vulnerabilities (Updated) ~ The Experts Consensus
http://www.sans.org/top20/
Posted by Meehowski on Wednesday 25 January 2006 - 13:26:58

As part of thread: Encryption Solutions - Whole Disk
... it. Besides being more work it also is much more vulnerable. Unencrypting inevitably leaves unencrypted remnants behind, either in deleted file space...
Posted by NIST.org on Monday 12 June 2006 - 20:23:32

As part of thread: WMF---Still vulnerable?
Steve Gibson at GRC.COM is reporting that he now believes that no Windows 9x computer is vulnerable to having this WMF vulnerability exploited. ...
Posted by Meehowski on Monday 23 January 2006 - 02:35:01

As part of thread: WMF---Still vulnerable?
Steve Gibson at GRC.COM is reporting that he now believes that no Windows 9x computer is vulnerable to having this WMF vulnerability exploited. ...
Posted by NIST.org on Saturday 21 January 2006 - 18:03:31

As part of thread: Microsoft's 0day "window()" Arbitrary Code Execution Vulnerability
Marco, I wish I knew. The reports I've received indicate that Lotus Notes uses the vulnerable shimgwv.dll file to get image information, but not to ...
Posted by NIST.org on Wednesday 04 January 2006 - 17:07:31

As part of thread: Microsoft's 0day "window()" Arbitrary Code Execution Vulnerability
...LN is able to show the WMF image also without the vulnerable DLL. The question is : Is Lotus Notes using the vulnerable DLL in a way that can t...
Posted by VALVAGIO on Wednesday 04 January 2006 - 11:15:03

Results 1 - 9 of 9 in Comments
Posted in reply to news item: $8,000 bounty for Vista and IE7 Vulnerabilities, plus bonuses.
...ctions are complete." But apparently there is a bidding war starting over Vista and IE7 zeroday exploits. < edited 1168991550 >
Posted by NIST.org on Tuesday 16 January 2007 - 15:57:11

Posted in reply to item: Lotus Notes vulnerable to MS Windows graphics rendering engine bug
...hich the exploit code tries to invoke. YMMV - but my 6.5.3 is not vulnerable !! Hope IBM will soon verify/deny this vulnerability!
Posted by deros68 on Thursday 05 January 2006 - 10:27:06

Posted in reply to news item: Extremely Critical New zero-day Windows vulnerability being exploited.
...gs such as canceling print jobs, etc. The current exploits are using the Escape() WMF routine but experts say other routines could also be vulnerable....
Posted by NIST.org on Monday 02 January 2006 - 16:40:15

Posted in reply to news item: RealVNC 4 Exploit Bypasses Authentication - Update: Fix Available
Having grabbed a copy of this exploit for internal testing I was amazed to see how easy it was to take complete control of the target system. If you ...
Posted by minshaw on Tuesday 23 May 2006 - 02:17:14

Posted in reply to news item: Spyware Makers Targeting Enterprises Users
...s attempted to hijack the computers of more than 70 named individuals at the UK Parliament using the recent WMF Exploit. < edited 1138256123 >
Posted by NIST.org on Wednesday 25 January 2006 - 23:14:44

Posted in reply to item: Lotus Notes vulnerable to MS Windows graphics rendering engine bug
Hi John I have performed another test. 1) I have disabled using regsvr32 the vulnerable dll %windir%system32shimgvw.dllshimgvw.dll 2) u...
Posted by VALVAGIO on Thursday 05 January 2006 - 04:15:26

Posted in reply to item: Lotus Notes vulnerable to MS Windows graphics rendering engine bug
... is able to show the WMF image also "without" the vulnerable DLL. The question is : Is Lotus Notes using the vulnerable DLL in a way that can t...
Posted by VALVAGIO on Thursday 05 January 2006 - 02:15:01

Posted in reply to news item: Extremely Critical New zero-day Windows vulnerability being exploited.
From SANS.org "The main vector that the bad guys use to exploit this is still by posting it on web sites." I've been wondering about public forum / b...
Posted by NIST.org on Wednesday 04 January 2006 - 23:06:46

Posted in reply to news item: Extremely Critical New zero-day Windows vulnerability being exploited.
It turns out that Microsoft has had a fix ready for the WMF exploit since 12/28 and has been sitting on it testing it all this time. Steve Gibson at ...
Posted by NIST.org on Wednesday 04 January 2006 - 19:22:14

Results in Other Pages
No matches found
Results in Bugtracker2
No matches found
Translate to: French German Italian Spanish Portuguese GTM_LAN_DUTCH Russian Chinese Arabic Korean English
Google Ads




NIST Site Menu
·Home

Current Security News
 
SANS Internet Storm Center, InfoCON: green

» Infocon: green

» Microsoft EMETv2 released, (Thu, Sep 2nd)
[02 Sep 2010 01:00pm]

» SDF, please!, (Thu, Sep 2nd)
[01 Sep 2010 06:50pm]

» Month of Undisclosed 0-day Bugs, (Wed, Sep 1st)
[01 Sep 2010 02:05pm]

» Microsoft issues updates to sysinternals ProcDump and Process Monitor: http://blogs.technet.com/b/sysinternals/archive/2010/08/30/updates-procdump-process-monitor-and-a-new-mark-s-blog-post.aspx, (Wed, Sep 1st)
[01 Sep 2010 10:29am]

» VMWARE releases 2 security advisories for ESX Service Console: http://lists.vmware.com/pipermail/security-announce/2010/000103.html and http://lists.vmware.com/pipermail/security-announce/2010/000104.html, (Wed, Sep 1st)
[01 Sep 2010 10:26am]

» Interesting PHP injection, (Tue, Aug 31st)
[31 Aug 2010 03:20am]

» Abandoned free email accounts, (Sun, Aug 29th)
[30 Aug 2010 05:38pm]

» Apple QuickTime potential vulnerability/backdoor, (Mon, Aug 30th)
[30 Aug 2010 05:24pm]

» New poll on mobile device security http://isc.sans.edu/poll.html, (Mon, Aug 30th)
[30 Aug 2010 04:26pm]

» Cisco IOS XR Software Border Gateway Protocol Vulnerability http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml, (Mon, Aug 30th)
[30 Aug 2010 03:51pm]

***
CNET News.com

» Facebook adds new remote log-out security feature
[02 Sep 2010 02:30pm]

» Nigerian scam tops list of decade's online cons
[02 Sep 2010 11:16am]

» India wants local servers from RIM, Google, Skype
[02 Sep 2010 10:45am]

» Twitter plans to record all links clicked
[02 Sep 2010 12:33am]

» China requires cell phone subscriber IDs
[01 Sep 2010 05:40pm]

» Quantum crypto cracked, researchers say
[01 Sep 2010 11:48am]

» Sweden reopens rape probe of Wikileaks founder
[01 Sep 2010 10:35am]

» Cars: The next hacking frontier?
[31 Aug 2010 12:07pm]

» Gmail, Skype now in India's crosshairs
[31 Aug 2010 10:47am]

» 3M to buy biometrics firm Cogent for $943 million
[30 Aug 2010 09:35am]

» RIM sidesteps BlackBerry ban in India
[30 Aug 2010 09:29am]

» 'LOL is this you?' spam spreading via Facebook chat
[27 Aug 2010 06:53pm]

» Google working on Gmail spam issue
[27 Aug 2010 12:13pm]

» RIM extends olive branch to Indian government
[26 Aug 2010 02:00pm]

» Bad flash drive caused worst U.S. military breach
[25 Aug 2010 04:37pm]

***
Computerworld Security News

» To boost security, Facebook adds remote logout
[02 Sep 2010 03:01pm]

» Botnet takedown may yield valuable data
[02 Sep 2010 04:25am]

» 3Par faces patent infringement lawsuit
[01 Sep 2010 05:04pm]

» Discover to get $5M from Heartland for '08 data breach
[01 Sep 2010 03:45pm]

» DARPA launches insider threat detection effort for military
[01 Sep 2010 03:03pm]

» Miami man pleads guilty in ID theft case
[01 Sep 2010 02:41pm]

» More Security News

***


***


More IT Security
News Feeds
More Sponsors

Advertise on this site
NIST - Books You Need

NIST Bookstore
RSS Feeds
Our news can be syndicated by using these rss feeds.
rss1.0
rss2.0
rdf
Add to NetVibes
Add to Bloglines
Add to NewsGator
Add to Google
Add to My Yahoo
Add to My MSN
Add to Technorati
Add to Pluckit
Add to My AOL
Subscribe in FeedLounge
Add to ProtoPage

Symantec News
Welcome
Username:

Password:


Remember me

[ ]
[ ]
[ ]

NIST.org is in no way connected to the U.S. government site NIST.gov

This site is © John Herron, CISSP. All Rights Reserved.

Please visit daily to stay up to date on all your IT Security compliance issues.

http://www.nist.org -
Hosted by BlueHost. We've never had a better hosting company.