Multiple Aztech Modem Router Products Session Hijacking Vulnerability

Aztech Modem Routers is an all-in-one modem and router product from the Aztech group of companies in Singapore. A session hijacking vulnerability exists in multiple Aztech Modem Routers products. An attacker could exploit this vulnerability to gain access to affected devices...

microcode_ctl security update

1:1.17-25.2 - Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04 - Add amd microcodeamdfam17h.bin data file - Resolves: 1527357 1:1.17-25.1 - Update microcode data file to 20170707 revision. - Resolves: 1465143...

CVE-2017-6140

On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 or 12.1.2 of BIG-IP LTM, AAM, AFM, Analytics, ASM, DNS, GTM or PEM, an undisclosed sequence ...

Dasan Networks GPON ONT WiFi Router H64X Series Cross-Site Request Forgery

Summary H64xx is comprised of one G-PON uplink port and four ports of Gigabit Ethernet downlink supporting 10/100/1000Base-T RJ45. It helps service providers to extend their core optical network all the way to their subscribers, eliminating bandwidth bottlenecks in the last mile. H64xx is...

Memory Leak Vulnerability in Multiple Huawei Products

The NIP6300/6600 series products are Huawei's new-generation professional intrusion prevention products for customers in enterprises, IDCs, campus networks, and carriers, etc. The Secospace USG6300/6500 is Huawei's new-generation, T-class, all-in-one data center firewall for cloud service...

CVE-2017-8214

Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than...

CVE-2017-2691

Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EVA-TL00C01B373 have a lock-screen bypass vulnerability. An unauthenticated attacker could force the phone to the fastboot mode and delete t...

CVE-2017-2710

BTV-W09C229B002CUSTC229D005,BTV-W09C233B029, earlier than BTV-W09C100B006CUSTC100D002 versions, earlier than BTV-W09C128B003CUSTC128D002 versions, earlier than BTV-W09C199B002CUSTC199D002 versions, earlier than BTV-W09C209B005CUSTC209D001 versions, earlier than BTV-W09C331B002CUSTC331D001 version...

HP to Patch RCE Bug Impacting 50 Enterprise Printer Models

UPDATE HP Inc. said it has released firmware patches for dozens of enterprise-class printer models affected by an arbitrary code execution bug. According to a security bulletin posted by HP, the vulnerability CVE-2017-2750 is tied to “insufficient solution DLL signature validation” allowing for...

Vivotek IP Cameras Remote Stack Overflow Vulnerability

Many Vivotek IP cameras suffer from a remote stack overflow vulnerability. Device models include CC8160, CC8370, CC8371, CD8371, FD8166A, FD8166A, FD8166A-N, FD8167A, FD8167A, FD8167AS, FD8167AS, FD8169A, FD8169A, FD8169A, FD8169AS, FD8169AS, FD816B, FD816B, FD816BA, FD816BA, FD816C, FD816C,...

CVE-2017-16804

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...

PT-2017-14573

Name of the Vulnerable Software and Affected Versions Redmine versions prior to 3.2.7 Redmine versions 3.3.x prior to 3.3.4 Description The reminders function in app/models/mailer.rb does not check whether an issue is visible. This allows remote authenticated users to obtain sensitive information...

CVE-2017-16804: Exposure of Sensitive Information to an Unauthorized Actor

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...

From Regular Expressions to AI

Three generations of attack detection methodology The oldest and well-studied approach is based on signatures and heuristics. From before the internet times, this approach was implemented in most kinds of detection systems from firewalls to anti-viruses. The second genera- tion represents an...

CVE-2017-14027

A Use of Hard-coded Credentials issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and...

Locked Data on Intel 5400s and 6000p Solid State Drives Could be Corrupted by Malware - Lenovo Support US

No description provided...

PT-2017-3193 · Korenix · Jetnet5628G-R +7

Name of the Vulnerable Software and Affected Versions: Korenix JetNet JetNet5018G version 1.4 Korenix JetNet JetNet5310G version 1.4a Korenix JetNet JetNet5428G-2G-2FX version 1.4 Korenix JetNet JetNet5628G-R version 1.4 Korenix JetNet JetNet5628G version 1.4 Korenix JetNet JetNet5728G-24P versio...

Oracle Hyperion Unspecified vulnerability in Oracle Hyperion Financial Reporting component (CNVD-2017-31832)

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications, it provides financial results, report production and other functions.Oracle Hyperion Financial Reporting is one of the financial statement management component. An unspecified vulnerability exists...

Design/Logic Flaw

Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion subcomponent: Security Models. The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion...

CVE-2017-10310: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion subcomponent: Security Models. The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion...