CVE-2017-16239

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters for example, the ImagePropertiesFilter or the IsolatedHostsFilter. All setups using Nova Filter...

Threat Outbreak Alert RuleID31295: Email Messages Distributing Malicious Software on November 14, 2017

Medium Alert ID: 55917 First Published: 2017 November 14 16:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31295 may contain the following files: Name |...

Threat Outbreak Alert RuleID31305: Email Messages Distributing Malicious Software on November 14, 2017

Medium Alert ID: 55921 First Published: 2017 November 14 15:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31305 may contain the following files: Name |...

UBUNTU-CVE-2017-16239

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters for example, the ImagePropertiesFilter or the IsolatedHostsFilter. All setups using Nova Filter...

Threat Outbreak Alert RuleID31283: Email Messages Distributing Malicious Software on November 14, 2017

Medium Alert ID: 55908 First Published: 2017 November 14 14:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31283 may contain the following files: Name |...

goldmixx.org XSS vulnerability

Open Bug Bounty ID: OBB-413971 Description| Value ---|--- Affected Website:| goldmixx.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Internet Explorer help

None None...

Security update 2017-11-14

...

Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017

Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017 Summary An information disclosure vulnerability exists when the Windows kernel fails to correctly initialize a memory address. An attacker who successfully exploits this...

Asterisk Memory Leak Vulnerability

Asterisk is prone to a memory/RTP/file descriptor leak vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-13680

Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use the product's UI to perform unauthorized file deletes on the resident file system...

documentabalear.cat XSS vulnerability

Vulnerable URL: http://www.documentabalear.cat/cataleg.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14246855 VIP website status:| No Coordinated Disclosure Timeline:...

search-recherche.gc.ca XSS vulnerability

Vulnerable URL: http://search-recherche.gc.ca/rGs/sr?q=1%27-confirm%27openbugbounty%27-%27=eng=mdndnd=s=10&st1rt;=0&s5bm3ts21rch;=x=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

dogearpublishing.net XSS vulnerability

Vulnerable URL:...

sip-scootershop.com XSS vulnerability

Vulnerable URL: https://sip-scootershop.com/main/base/Results.aspx?t=%3c%2fscript%3e%3cimg+src%3dx+onerror%3dprompt%2fXSSPOSED%2f%3e=sco,ape,lam,old,px,sma,max,atv,mot=1=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.01.2018 Vulnerability type:| XSS Vulnerability...

hotelprofessionals.nl XSS vulnerability

Vulnerable URL: https://www.hotelprofessionals.nl/vacatures-resultaat/?keywords%5Ballwords%5D="--!%5Bgeo%5D%5Blocation%5D=%5Bgeo%5D%5Bradius%5D=any Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability...

ProMinent MultiFLEX M10a Controller

CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: ProMinent Equipment: MultiFLEX M10a Controller Vulnerabilities: Client-Side Enforcement of Server-Side Security, Insufficient Session Expiration, Cross-Site Request Forgery, Information Exposure, and Unverified Passwo...

Slackware 14.0 / 14.1 / 14.2 / current : xorg-server (SSA:2017-279-03)

New xorg-server packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-279-03. The text itself is...

welldressinds.com XSS vulnerability

Vulnerable URL: http://welldressinds.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16967033 VIP website status:| No Coordinated Disclosure Timeline: Description|...

CentOS 7 before 1708 PIE/stack corruption Vulnerability

Exploit for linux platform in category remote exploits Linux PIE/stack corruption CVE-2017-1000253 ======================================================================== Contents ======================================================================== Summary Analysis Exploitation Acknowledgmen...