Blue Coat PacketShaper S-Series Information Disclosure Vulnerability

Blue Coat PacketShaper S-Series is a scalable S-Series WAN optimization and network QoS platform from Blue Coat Systems. The platform provides bandwidth cost control, application performance optimization and network performance monitoring. An information disclosure vulnerability exists in the HTT...

Design/Logic Flaw

The HTTPS server in Blue Coat PacketShaper S-Series 11.5.x before 11.5.3.2 might allow remote attackers to obtain sensitive credentials and other information via unspecified vectors, related to use of insecure cryptographic parameters...

CVE-2016-5774

The HTTPS server in Blue Coat PacketShaper S-Series 11.5.x before 11.5.3.2 might allow remote attackers to obtain sensitive credentials and other information via unspecified vectors, related to use of insecure cryptographic parameters...

CVE-2016-5774: Undefined Security Weakness

The HTTPS server in Blue Coat PacketShaper S-Series 11.5.x before 11.5.3.2 might allow remote attackers to obtain sensitive credentials and other information via unspecified vectors, related to use of insecure cryptographic parameters...

s-asian.cam.ac.uk XSS vulnerability

Vulnerable URL: http://www.s-asian.cam.ac.uk/wp-content/themes/csas/static/mediaelement/flashmediaelement.swf?jsinitfu%xnction=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 20.06.2017 Latest check for patch:| 20.06.2017 15:37 GMT Vulnerability type:| XSS Vulnerability...

Charm lesson OM video conferencing system /admin/do/proxy.php file target parameter local file include vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.api.request import req from pocsuite.api.poc import register from pocsuite.api.poc import Output, POCBase class TestPOCPOCBase: vulID = 'SSV-12345' vul ID version = '1' author = 'hhxx' vulDate = '2016-05-18'...

Debian DSA-3616-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. - CVE-2014-9904 It was discovered that the sndcompresscheckinput function used in the ALSA subsystem does not properly check for an integer overflow,...

[SECURITY] [DSA 3616-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3616-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 04, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3616-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3616-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 04, 2016 https://www.debian.org/security/faq -...

DSA-3616-1 linux - security update

Bulletin has no description...

SA127 : PacketShaper S-Series Insecure Cryptographic Parameters

SUMMARY The HTTPS web UI in PacketShaper S-Series 11.5 may use insecure cryptographic parameters for incoming management connections. A remote attacker who can be a man-in-the-middle, under certain circumstances, may be able to exploit this vulnerability to obtain user authentication credentials...

Siemens S7300/400 PLC has a Privilege Bypass Downtime Vulnerability

The Siemens S7300/400 PLC is a modular general-purpose controller from Siemens for the manufacturing industry. A privilege bypass downtime vulnerability exists in the Siemens S7300/400 PLC. An attacker can exploit the vulnerability by sending a specific message to change the PLC from the RUN stat...

[SECURITY] Fedora 22 Update: libksba-1.3.4-1.fc22

KSBA pronounced Kasbah is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS...

n-e-r-v-o-u-s.com XSS vulnerability

Vulnerable URL: http://n-e-r-v-o-u-s.com/shop/product.php?code=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Debian: Security Advisory (DSA-3583-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack...

CVE-2016-1206: Exposure of Sensitive Information to an Unauthorized Actor

The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack...

Scientific Linux Security Update : ImageMagick on SL6.x, SL7.x i386/x86_64 (20160509) (ImageTragick)

Security Fixes : - It was discovered that ImageMagick did not properly sanitize certain input before passing it to the delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the...

SA123 : OpenSSL Vulnerabilities 3-May-2016

SUMMARY Blue Coat products using affected versions of OpenSSL are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to intercept and decrypt TLS sessions, obtain arbitrary data from the target's memory stack, or execute arbitrary code through buffer...

Oracle: Security Advisory (ELSA-2016-3552)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...