[SECURITY] Fedora 25 Update: kernel-4.10.17-200.fc25

The kernel meta package...

Unauthorized Access Vulnerability in dLAN 200 AVeasy

The dLAN 200 AVeasy is a German networking device that works by converting the home power grid into a convenient data network. An unauthorized access vulnerability exists in the dLAN 200 AVeasy that could allow an attacker to bypass privilege authentication and access sensitive directories or fil...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update F)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update D)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update G)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...

[SECURITY] Fedora 25 Update: kernel-4.10.10-200.fc25

The kernel meta package...

[SECURITY] Fedora 25 Update: kernel-4.10.9-200.fc25

The kernel meta package...

[SECURITY] Fedora 25 Update: kernel-4.10.5-200.fc25

The kernel meta package...

CVE-2017-5859: Undefined Security Weakness

On Cambium Networks cnPilot R200/201 devices before 4.3, there is a vulnerability involving the certificate of the device and its RSA keys, aka RBN-183...

[SECURITY] Fedora 25 Update: kernel-4.9.12-200.fc25

The kernel meta package...

openSUSE: Security Advisory for xen (openSUSE-SU-2017:0005-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

QNAP QTS < 4.2.3 build 20170213 Multiple Vulnerabilities

QNAP QTS is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; if description...

QNAP QTS 4.2.x XSS / Command Injection / Transport Issues

QNAP QTS 4.2.x multiple vulnerabilities ======================================= The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-42-multiple-vulnerabilities.txt Overview -------- QNAP QTS firmware contain Missing Transport Layer Security CWE-319, Improp...

Cross site scripting

Cross-site scripting XSS vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML v...

CVE-2016-3150

Cross-site scripting XSS vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML v...

CVE-2016-3151

Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to read /etc/shadow via unspecified...

CVE-2016-3150

Cross-site scripting XSS vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML v...

PT-2017-8350

Name of the Vulnerable Software and Affected Versions Barco ClickShare CSC-1 devices with firmware prior to 01.09.03 Barco ClickShare CSM-1 devices with firmware prior to 01.06.02 Barco ClickShare CSE-200 devices with firmware prior to 01.03.02 Description A directory traversal issue exists in th...

CVE-2016-3151: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to read /etc/shadow via unspecified...

Fedora 24 : xen (2016-bcbae0781f)

x86 CMPXCHG8B emulation fails to ignore operand size override XSA-200, CVE-2016-9932 1404262 ---- ARM guests may induce host asynchronous abort XSA-201, CVE-2016-9815, CVE-2016-9816, CVE-2016-9817, CVE-2016-9818 1399747 qemu: Divide by zero vulnerability in cirrusdocopy 1399055 CVE-2016-9921,...