Juniper Junos Authentication Bypass (JSA11001)

The version of Junos OS installed on the remote host is prior to 14.1X53-D53, 15.1R7-S4, 15.1X53-D593, 16.1R7-S4, 17.1R2-S11, 17.2R3-S3, 17.3R2-S5, 17.4R2-S9, 18.1R3-S8, 18.2R2, or 18.3R1-S7. It is, therefore, affected by an authentication bypass vulnerability as referenced in the JSA11001...

CVE-2020-1618

On Juniper Networks EX and QFX Series, an authentication bypass vulnerability may allow a user connected to the console port to login as root without any password. This issue might only occur in certain scenarios: • At the first reboot after performing device factory reset using the command...

CVE-2020-1618

CVE-2020-1618 affects Juniper Networks Junos OS on EX and QFX Series. The vulnerability is a console-port authentication bypass that can allow a user connected to the console port to login as root without a password. This may occur in specific scenarios: during the first reboot after a factory re...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-1618)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-1618

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 144343...

CVE-2018-1618

CVE-2018-1618 affects IBM Security Privileged Identity Manager Virtual Appliance (2.2.1). A remote attacker can exploit a directory traversal via crafted URLs containing /../ to view arbitrary files, compromising confidentiality (C to H). The CVSS3 base score is 7.5 (high) with network access and...

CVE-2019-1618

CVE-2019-1618 (Cisco Nexus 9000, NX-OS standalone). A vulnerability in the Tetration Analytics agent allows an authenticated, local attacker to gain root privileges by replacing valid agent files due to an incorrect permissions setting. A successful exploit could execute attacker-supplied code. A...

Debian: Security Advisory (DLA-1618-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1618-1 : libsndfile security update

Multiple vulnerabilities have been found in libsndfile, the library for reading and writing files containing sampled sound. CVE-2017-8361 The flacbuffercopy function flac.c is affected by a buffer overflow. This vulnerability might be leveraged by remote attackers to cause a denial of service, or...

Ubuntu: Security Advisory (USN-2877-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2877-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2877-1 advisory. A bad cast was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a...

Security update for Chromium (important)

Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 boo963184 - CVE-2016-1613: Use-after-free in PDFium boo963185 - CVE-2016-1614: Information leak in Blink boo963186 - CVE-2016-1615: Origin confusion in...

USN-2877-1: Oxide vulnerabilities

A bad cast was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash or execute arbitrary code with the privileges of the sandboxed render process. CVE-2016-1612 An issue was...

[SECURITY] [DSA 3456-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3456-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 27, 2016 https://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: chromium-browser security update

Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Debian Security Advisory DSA 3456-1 (chromium-browser - security update)

Several vulnerabilities were discovered in the chromium web browser. CVE-2015-6792 An issue was found in the handling of MIDI files. CVE-2016-1612 cloudfuzzer discovered a logic error related to receiver compatibility in the v8 javascript library. CVE-2016-1613 A use-after-free issue was discover...

Security update for Chromium (important)

Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 boo963184 - CVE-2016-1613: Use-after-free in PDFium boo963185 - CVE-2016-1614: Information leak in Blink boo963186 - CVE-2016-1615: Origin confusion in...

CVE-2016-1618

CVE-2016-1618 : In Blink, used by Google Chrome prior to 48.0.2564.82, a weak cryptographicallyRandomValues RNG was not ensured, potentially allowing remote attackers to defeat cryptographic protections via unspecified vectors. Connected documents confirm this as a confirmed issue in Chrome/Chrom...

UBUNTU-CVE-2016-1618

Blink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper cryptographicallyRandomValues random number generator is used, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors...

KLA10745 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Multiple unspecified vulnerabilities at HarfBuzz and V8 c...