Security Bulletin: SLOTH - Weak MD5 Signature Hash vulnerability may affect DS8000

Summary SLOTH - Weak MD5 Signature Hash vulnerability may affect DS8000 CVE-2015-7575 Vulnerability Details CVEID: CVE-2015-7575 DESCRIPTION: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange...

SUSE: Security Advisory (SUSE-SU-2022:1750-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1750

A flaw was found in the machine-config-operator that causes an OpenShift node to become unresponsive when a container consumes a large amount of memory. An attacker could use this flaw to deny access to schedule new pods in the OpenShift cluster. This was fixed in openshift/machine-config-operato...

CVE-2020-1750

CVE-2020-1750 affects the OpenShift machine-config-operator. A memory stress scenario could render a node unresponsive and block scheduling of new pods. Affected releases were fixed in openshift/machine-config-operator versions 4.4.3, 4.3.25, and 4.2.36. Remediation is to upgrade to one of these ...

CVE-2021-1750

CVE-2021-1750 affects Apple OS updates: macOS Big Sur 11.2, macOS Catalina 10.15.x (Security Update 2021-001), macOS Mojave 10.14.x (Security Update 2021-001), watchOS 7.3, tvOS 14.4, iOS 14.4, and iPadOS 14.4. Root cause described as a logic issue in the kernel that may allow an application to e...

macOS 10.14.x < 10.14.6 Security Update 2021-001 / 10.15.x < 10.15.7 Security Update 2021-001 / macOS 11.x < 11.2 (HT212147)

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-001 Mojave, 10.15.x prior to 10.15.7 Security Update 2021-001 Catalina, or 11.x prior to 11.2. It is, therefore, affected by multiple vulnerabilities, including the following: - A logic...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.2.36 ose-machine-config-operator-container security update

An update for ose-machine-config-operator-container is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

CVE-2020-1750

A flaw was found in the machine-config-operator that causes an OpenShift node to become unresponsive when a container consumes a large amount of memory. An attacker could use this flaw to deny access to schedule new pods in the OpenShift cluster...

Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by following vulnerability - A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to...

CVE-2019-1750

Cisco IOS XE Software on Catalyst 4500 Series Switches is vulnerable in the Easy Virtual Switching System (VSS) to denial of service via unauthenticated, adjacent CDP packets. The root cause is incomplete error handling when processing CDP in VSS. An attacker can send a crafted CDP packet to caus...

CVE-2018-1750

CVE-2018-1750 affects IBM Security Key Lifecycle Manager (SKLM) with vulnerability in permissions on a security-critical resource that allows read/modify by unintended actors. Affected SKLM versions include 3.0-3.0.0.1, 2.7-2.7.0.4, and 2.6-2.6.0.5. IBM’s bulletin (and X-Force reference) confirms...

Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Reporting Service shipped with Rational Reporting for Development Intelligence (CVE-2017-1750, CVE-2018-1363)

Summary Jazz Reporting Service is shipped as a component of Rational Reporting for Development Intelligence RRDI. Information about multiple security vulnerabilities affecting Jazz Reporting Service has been published in a security bulletin. Vulnerability Details CVEID: CVE-2017-1750 DESCRIPTION:...

CVE-2017-1750

CVE-2017-1750 affects IBM Jazz Reporting Service (JRS): Cross-site scripting in JRS 5.0–5.0.2 and 6.0–6.0.5, enabling an attacker to inject arbitrary JavaScript in the Web UI and potentially disclose credentials in a trusted session. The IBM security bulletins list affected products/versions and ...

Buffalo WZR-1750DHP2 Arbitrary Code Execution Vulnerability

The Buffalo WZR-1750DHP2 is a router product from the Buffalo Group of Japan. A security vulnerability exists in the Buffalo WZR-1750DHP2 version 2.30 and earlier. An attacker can exploit the vulnerability to bypass authentication and execute arbitrary commands...

Solaris 10 (x86) : 148871-01

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: mailx1. Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update,...

Solaris 10 (sparc) : 148870-01

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: mailx1. Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update,...

About the security content of watchOS 2.2 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

heavy-r.com XSS vulnerability

Vulnerable URL: http://www.heavy-r.com/index.php?keyword=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%27OPENBUGBOUNTY%27%29%3E=search=dosearch Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1750 VIP website status:|...

CVE-2016-1750

CVE-2016-1750 involves a use-after-free vulnerability in the kernel that affects Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2. The flaw could let an attacker’s crafted app execute arbitrary code with kernel/priviliged context. Apple documentation attributes t...

About the security content of tvOS 9.2

About the security content of tvOS 9.2 This document describes the security content of tvOS 9.2. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn...