8940 matches found
Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update D)
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Siemens Equipment : SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet module Vulnerabilities : Missing Authentication for Critical Function, Inadequate Encryption Strength 2. UPDATE...
Debian DLA-1298-1 : simplesamlphp security update
Several vulnerabilities have been discovered in SimpleSAMLphp, a framework for authentication, primarily via the SAML protocol. CVE-2016-9814 & CVE-2016-9955 An incorrect check of return values in the signature validation utilities allowed an attacker to get invalid signatures accepted as valid i...
[SECURITY] [DLA 1297-1] simplesamlphp security update
Package : simplesamlphp Version : 1.9.2-1+deb7u3 CVE ID : CVE-2016-9814 CVE-2016-9955 Several vulnerabilities have been discovered in SimpleSAMLphp, a framework for authentication, primarily via the SAML protocol. CVE-2016-9814 & CVE-2016-9955 An incorrect check of return values in the signature...
Claymore Dual GPU Miner 10.5 - Format String
Claymore Dual GPU Miner 10.5 - Format String Claymore’s Dual GPU Miner 10.5 and below is vulnerable to a format strings vulnerability. This allows an unauthenticated attacker to read memory addresses, or immediately terminate the mining process causing a denial of service. After reading about the...
Pulse Secure Linux client GUI fails to validate SSL certificates
Overview The Pulse Secure Linux client GUI fails to validate SSL certificates, which can allow an attacker to modify connection settings. Description Pulse Secure is an SSL VPN solution. The Linux Pulse Secure client GUI is implemented using WebKit, and the actions taken using the GUI are...
CVE-2018-2689
creationtimestamp| type| source ---|---|--- 2018-01-28 18:28:38+00:00| seen| https://t.me/itsecalert/87...
CVE-2018-2687
creationtimestamp| type| source ---|---|--- 2018-01-28 18:28:38+00:00| seen| https://t.me/itsecalert/87...
CVE-2018-2693
creationtimestamp| type| source ---|---|--- 2018-01-28 18:28:38+00:00| seen| https://t.me/itsecalert/87...
CVE-2018-2698
creationtimestamp| type| source ---|---|--- 2018-01-28 18:28:38+00:00| seen| https://t.me/itsecalert/87...
CVE-2018-2686
creationtimestamp| type| source ---|---|--- 2018-01-28 18:28:38+00:00| seen| https://t.me/itsecalert/87...
Security update for MozillaFirefox (important)
This update for MozillaFirefox fixes the following issues: - update to Firefox 52.6esr boo1077291 MFSA 2018-01 Speculative execution side-channel attack "Spectre" MFSA 2018-03 CVE-2018-5091 bmo1423086 Use-after-free with DTMF timers CVE-2018-5095 bmo1418447 Integer overflow in Skia library during...
Slackware 14.0 / 14.1 / 14.2 / current : curl (SSA:2018-024-01)
New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-024-01. The text itself is copyright C Slackware Linux,...
CentOS Web Panel 0.9.8.12 - 'row_id' / 'domain' SQL Injection
Document Title: =============== CentOS Web Panel v0.9.8.12 - Remote SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1833 Release Date: ============= 2018-01-22 Vulnerability Laboratory ID VL-ID:...
Security advisory YSA-2018-01 | Yubico
Oscar Mira and Roi Martin from the Schibsted security team informed us of a security issue in the OATH Initiative for Open Authentication applet on the YubiKey NEO. The YubiKey OATH applet is used to generate time-based one-time password TOTP and HMAC-based one-time password HOTP codes that are...
CVE-2017-5116
creationtimestamp| type| source ---|---|--- 2018-01-18 08:28:32+00:00| published-proof-of-concept| https://t.me/R0Crew/386 2018-01-18 09:29:09+00:00| published-proof-of-concept| https://t.me/antichat/660 2018-01-18 10:32:09+00:00| published-proof-of-concept| https://t.me/br0wsec/23 2018-01-22...
CloudMe Sync v1.10.9
This module exploits a stack-based buffer overflow vulnerability in CloudMe Sync v1.10.9 client application. This module has been tested successfully on Windows 7 SP1 x86. Module Options msf use exploit/windows/misc/cloudme/sync msf undefinedsync show actions ...actions... msf undefinedsync set...
RedHat Update for linux-firmware RHSA-2018:0094-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RedHat Update for microcode_ctl RHSA-2018:0093-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...