Ubuntu: Security Advisory (USN-3361-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-8838

XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. The affected script is cgi-bin/HASync/hasync.cgi...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1247-1)

The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2015-1350: The VFS subsystem in the Linux kernel provided an incomplete set of requirements for setattr operations that underspecifies removing extended...

openSUSE: Security Advisory for kernel (openSUSE-SU-2016:3050-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES11 Security Update : kernel (SUSE-SU-2017:0333-1)

The SUSE Linux Enterprise 11 SP2 LTSS kernel was updated to receive various security and bugfixes. This is the last planned LTSS kernel update for the SUSE Linux Enterprise Server 11 SP2 LTSS. The following security bugs were fixed : - CVE-2016-10088: The sg implementation in the Linux kernel did...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:0181-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.38 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2015-1350: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removin...

SUSE-SU-2017:0181-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.38 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-1350: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing...

[SECURITY] [DLA 772-1] linux security update

Package : linux Version : 3.2.84-1 CVE ID : CVE-2012-6704 CVE-2015-1350 CVE-2015-8962 CVE-2015-8963 CVE-2015-8964 CVE-2016-7097 CVE-2016-7910 CVE-2016-7911 CVE-2016-7915 CVE-2016-8399 CVE-2016-8633 CVE-2016-8645 CVE-2016-8655 CVE-2016-9178 CVE-2016-9555 CVE-2016-9576 CVE-2016-9756 CVE-2016-9793...

openSUSE Security Update : the Linux Kernel (openSUSE-2016-1426)

The openSUSE Leap 42.2 kernel was updated to 4.4.36 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2015-1350: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.2 kernel was updated to 4.4.36 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-1350: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended...

CVE-2015-1350

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service capability stripping via a failed invocation of a system call, as...

CVE-2015-1350

CVE-2015-1350 is confirmed in the Connected documents as a vulnerability in the Linux kernel VFS subsystem (3.x) where setattr operations underspecify removal of extended privilege attributes. This can allow local users to cause a denial of service by stripping capabilities from specific processe...

Cisco IOS SIP Memory Leak DoS (CSCuj23293)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Session Initiation Protocol SIP gateway implementation due to improper handling of malformed SIP messages. An unauthenticated, remote attacker can...

CVE-2016-1350

CVE-2016-1350 affects Cisco IOS (versions 15.3–15.4), Cisco IOS XE (3.8–3.11), and Cisco Unified Communications Manager. The issue is a memory-leak/DoS in the SIP gateway caused by improper processing of malformed SIP messages, leading to remote attackers potentially triggering a device reload. T...

Oracle: Security Advisory (ELSA-2011-1350)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla component com_jp_jobs SQL Injection (CVE-2010-1350)

An SQL injection vulnerability has been reported in Joomlaprojects Com Jp Jobs. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-1350

CVE-2014-1350 affects Apple iOS prior to 7.1.2. The issue stems from incorrect state management of the Find My iPhone (iCloud) state, allowing physically proximate attackers to bypass the iCloud password requirement and turn off Find My iPhone. Supported in the iOS 7.1.2 update, which addresses m...

Cisco TFTP Server 1.1 - DoS

No description provided by source. Exploit Title: Cisco TFTP Server 1.1 Date: 2010-03-25 Author: SuBz3r0 Software Link: http://www.oldversion.com/CiscoTFTPServer.html Version: 1.1 Tested on: XP SP3,Win2k3 CVE : if exists Code : Cisco TFTP Server v1.1 DoS print print print SuBz3r0 print print prin...

ProSysInfo TFTP server TFTPDWIN <= 0.4.2 Univ. Remote BOF Exploit

No description provided by source. !/usr/bin/perl ProSysInfo TFTP server TFTPDWIN = 0.4.2 Universal Remote Buffer Overflow Exploit Works on all Windows versions. ---------------------------------------- Exploit by SkD [email protected] Let's take a description from their page at:...

CVE-2014-3872

The CVE-2014-3872 affects D-Link DAP-1350 (Rev. A1) with firmware 1.14 and earlier, where multiple SQL injection vulnerabilities in the administration login page allow remote attackers to execute arbitrary SQL via the username or password. The issue is documented with a high-severity CVSS v2 scor...