Your search for vulnerability returned 1343 results.

A vulnerability discovered in SCADA could grant a remote attacker control over critical infrastructure, researchers said on Wednesday.
The SecurityQA Toolbar from iSEC Partners is a browser-based add-in for Internet Explorer that is used to perform web-application vulnerability testing directly within the browser environment. Ounce Labs 5.0 is a static source code analysis solution based primarily on two separate components. The application approaches application vulnerability assessment by statically analysing source code and supports many different languages, including C/C++, Java/JSP,.NET (C#, VB.NET, ASP.NET) Classic ASP (VB and Javascript) and Visual Basic. AppDetective primarily looks for security holes inside of a number of popular database servers. The user interface makes it easy to determine which steps of the scan should be performed next. Mozilla on Tuesday released eight patches - three of them deemed "critical" - in its Firefox 2.0.0.5 release, as the company's chief security official chided Microsoft for failing to protect users from an Internet Explorer bug. Cisco's IP traffic-collection software contains a vulnerability that can provide attackers with unauthorised access and grant them full administrative control to an operating system, the networking giant reported in an advisory. A flaw has been discovered in Microsoft's flagship Windows Vista operating system. Microsoft on Tuesday pushed out 11 patches for 20 vulnerabilities. For this review, I decided to combine these products into a single group of their own. Please keep in mind that these products can be purchased separately and can function on their own. In its largest security update in 18 months, Microsoft on Tuesday delivered 11 patches to resolve 26 vulnerabilities in its operating system and related components. Forget SSL injection and cross-site scripting, there's a new website vulnerability in town -- and you can't scan for it. Roughly one month after Microsoft disclosed that attackers were exploiting a zero-day Active X vulnerability, the attacks are multiplying; but mostly in China. The youthful president and CEO of Veracode tells Paul Fisher why SaaS is the only way forward for vulnerability scanning. A DNS design flaw, which could have allowed remote attackers to silently hijack web sessions, prompted Tuesday's release of an unprecedented multivendor patch. Users are being advised to update their systems after the emergence of a new rash of attacks targeting a previously-patched flaw in Adobe Acrobat. Attacks reported on recently-patched Windows hole. Public and private proof-of-concept code has emerged for the gaping Windows hole plugged by Microsoft on Thursday in an emergency update. The old stock market mantra -- buy low, sell high -- could prove especially useful if you call your broker on Patch Tuesday. In an advisory, Cisco Systems notified users of 12 security patches to fix vulnerabilities in its Internet Operating System (IOS) Software and Unified Communications Manager.

Protecting users from internet-borne threats falls on trusted websites, says Overstock's Sam Peterson. Dan Kaplan reports.