vendredi 20 septembre 2019    || Inscription
BanniereAlertes
 
 

Notre sélection d'alertes et avis SSI.
Sources : US Cert, Cert EU, Cert FR, Cnil, VulDB.

Microsoft Internet Explorer 8 Remote Code Execution [1] (CERT-EU Security Advisory 2014-050)

Internet Explorer 8 is prone to a remote code-execution vulnerability due to a use-after-free condition.
Auteur: Cert EU

Microsoft Security Updates (CERT-EU Security Advisory 2014-049)

Microsoft has published on a number of new security updates which has been released on May 08, 2014.
Auteur: Cert EU

Security updates available for Adobe Reader and Acrobat (CERT-EU Security Advisory 2014-048)

Adobe has released security updates for Adobe Reader and Acrobat XI (11.0.06) and earlier versions for Windows and Macintosh.
Auteur: Cert EU

Security updates available for Adobe Flash Player (CERT-EU Security Advisory 2014-047)

Adobe has released security updates for Adobe Flash Player 13.0.0.206 and earlier versions for Windows and Macintosh and Adobe Flash Player 11.2.202.356 and earlier versions for Linux.
Auteur: Cert EU

BIND nameservers security update[1] (CERT-EU Security Advisory 2014-046)

A defect in the pre-fetch feature (which is enabled by default) can cause BIND 9.10.0 to terminate with a "REQUIRE" assertion failure if it processes queries whose answers have particular attributes.
Auteur: Cert EU

FreeBSD Security Advisory (CERT-EU Security Advisory 2014-045)

hen network packets making up a TCP stream (``TCP segments'') are received out-of-sequence, they are maintained in a reassembly queue by the destination system until they can be re-ordered and re-assembled.
Auteur: Cert EU

Citrix NetScaler Application Delivery Security Update [1] (CERT-EU Security Advisory 2014-044)

A number of security vulnerabilities have been identified in the management component of the Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway products.
Auteur: Cert EU

UPDATE Vulnerability in Internet Explorer Could Allow Remote Code Execution (CERT-EU Security Advisory 2014-041)

UPDATE: Microsoft has issued a cumulative security update for Internet Explorer (no 2965111) resolving the publicly disclosed vulnerability (CVE-2014-1776 [1]) as well as other eight privately reported vulnerabilities in IE [2].
Auteur: Cert EU

Oracle Critical Patch Update Advisory (CERT-EU Security Advisory 2014-043)

The Oracle Critical Patch Update for April 2014 [1] were released.
Auteur: Cert EU

Security updates available for Adobe Flash Player (CERT-EU Security Advisory 2014-042)

Adobe has released security updates for Adobe Flash Player 13.0.0.182 and earlier versions for Windows, Adobe Flash Player 13.0.0.201 and earlier versions for Macintosh and Adobe Flash Player 11.2.202.350 and earlier versions for Linux.
Auteur: Cert EU

VMware Security Advisories (VMSA-2014-0004.6) CERT-EU Security Advisory 2014-040

VMware product updates address OpenSSL security vulnerabilities.
Auteur: Cert EU

VMware Security Advisories (VMSA-2014-0003) (CERT-EU Security Advisory 2014-039)

VMware vSphere Client updates address security vulnerabilities
Auteur: Cert EU

Oracle Critical Patch Update Advisory of April 2014 (CERT-EU Security Advisory 2014-038)

Oracle Critical Patch Update Advisory of April 2014 contains 104 new security fixes across the product families.
Auteur: Cert EU

UPDATE OpenSSL CRITICAL vulnerability (CERT-EU Security Advisory 2014-034)

OpenSSL library is vulnerable to a memory leakage. Both servers and clients are affected. It can lead to a leak of the content of the memory allowing access to private keys, credentials, or any other confidential data . There are already some...
Auteur: Cert EU

Apache Tomcat Update (CERT-EU Security Advisory 2014-037)

It was possible to craft a malformed Content-Type header for a multipart request that caused Apache Tomcat to enter an infinite loop. A malicious user could, therefore, craft a malformed request that triggered a denial of service.
Auteur: Cert EU

Microsoft Security Updates (EU Security Advisory 2014-036)

Microsoft has published on a number of new security updates which has been released on April 08, 2014.
Auteur: Cert EU

Security updates available for Adobe Flash Player (CERT-EU Security Advisory 2014-035)

Adobe has released security updates for Adobe Flash Player 12.0.0.77 and earlier versions for Windows and Macintosh and Adobe Flash Player 11.2.202.346 and earlier versions for Linux. These updates address vulnerabilities that could potentially...
Auteur: Cert EU

Multiple vulnerabilities in Cisco IOS (CERT-EU Security Advisory 2014-033)

Cisco released its semiannual Cisco IOS Software Security Advisory Bundled Publication on March 26, 2014.
Auteur: Cert EU

Vulnerability in Microsoft Word could allow remote code execution (CERT-EU Security Advisory 2014-032)

There is a vulnerability affecting multiple versions of Microsoft Word. At this time, we are aware of limited, targeted attacks directed at Microsoft Word 2010. The vulnerability could allow remote code execution if a user opens a specially...
Auteur: Cert EU

Security updates available for Adobe Flash Player (CERT-EU Security Advisory 2014-031)

Adobe has released security updates for Adobe Flash Player 12.0.0.70 and earlier versions for Windows and Macintosh and Adobe Flash Player 11.2.202.341 and earlier versions for Linux. [1]
Auteur: Cert EU

Multiple vulnerabilities in Microsoft products (CERT-EU Security Advisory 2014-030)

Microsoft released five bulletins [1] to address 23 unique CVEs in Microsoft Windows, Internet Explorer and Silverlight.
Auteur: Cert EU

Snake Campaign and Cyber Espionage Toolkit [1] (CERT-EU Security Advisory 2014-029)

BAE Systems have recently published a report on so called Snake Campaign and Cyber Espionage Toolkit [1].
Auteur: Cert EU

Cisco Small Business Router Password Disclosure Vulnerability [1] (CERT-EU Security Advisory 2014-028)

A vulnerability in the web management interface of the Cisco RV110W Wireless-N VPN Firewall, the Cisco RV215W Wireless-N VPN Router, and the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain...
Auteur: Cert EU

Multiple Vulnerabilities in Cisco Wireless LAN Controllers [1] (CERT-EU Security Advisory 2014-027)

The Cisco Wireless LAN Controller (WLC) product family is affected by the following vulnerabilities
Auteur: Cert EU

JBoss Enterprice Aplication Platform update [1] (CERT-EU Security Advisory 2014-026)

An update for Red Hat JBoss Enterprise Application Platform 6.2.1 is now available from the Red Hat Customer Portal.
Auteur: Cert EU
First684685686687688689690691692693Last

Événements SSI

LES ASSISES

Grand rendez-vous annuel des RSSI, les Assises de la sécurité des systèmes d'information se tiennent à Monaco (Grimaldi Forum) du 9 au 12 octobre 2019. Organisées par DG Consultants.

BLOCKCHAIN

Conférence et exposition sur les applications d'entreprise de la blockchain à Paris, cité universitaire internationale, les 13 et 14 novembre 2019. Organisés par Corp Agency.

TRUSTECH

Cet événement international dédié aux paiements, à l'identification et à la sécurité est organisé à Cannes (palais des festivals) du 26 au 28 novembre 2019. Organisé par Comexposium.

FIC

Ayant pour thème cette année "Replacer l'humain au coeur de la cybersécurité", le Forum International de la Cybersécurité occupe les 28, 29 et 30 janvier 2020 le Grand Palais de Lille. Organisé par la Région Hauts-de-France et Euratechnologies, la Gendarmerie Nationale et CEIS.

RSS