CVE-2013-5944

The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface...

CVE-2013-5944

The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface...

CVE-2013-5944

The vulnerability CVE-2013-5944 affects Siemens SCALANCE X-200 and X-200IRT switches. The integrated web server does not properly enforce authentication, enabling remote attackers to perform administrative actions via the management interface. Affected firmware: SCALANCE X-200 before 4.5.0 and X-...

CVE-2013-5944: Improper Authentication

The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface...

PT-2013-5881

Name of the Vulnerable Software and Affected Versions Siemens SCALANCE X-200 switches versions prior to 4.5.0 Siemens SCALANCE X-200IRT switches versions prior to 5.1.0 Description The issue concerns the integrated web server on certain Siemens switches, which fails to properly enforce...

L3 CPU shared cache architecture is susceptible to a Flush+Reload side-channel attack

Overview L3 CPU shared cache architecture is susceptible to a Flush+Reload side-channel attack, resulting in information leakage. allowing a local attacker to derive the contents of memory not belonging to the attacker. Description Common L3 CPU shared cache architecture is susceptible to a...

Fedora Update for kernel FEDORA-2013-17012

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-17012 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora 19 : kernel-3.11.1-200.fc19 (2013-17012)

The 3.11.1 update contains a number of important fixes accross the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Discuz! x 2.5-3.0 beta 存储型跨站漏洞

Discuz! 已拥有11年以上的应用历史和200多万网站用户案例 是全球成熟度最高、覆盖率最大的论坛软件系统之一，淘帖处发表评论，直接插入XSS CODE。可触发XSS漏洞 0 Discuz x 2.5 - 3.0 厂商补丁： Discuz! ------ 下载官方最新程序...

CVE-2013-5709

The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value...

Authentication flaw

The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value...

CVE-2013-5709

The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value...

CVE-2013-5709

CVE-2013-5709 affects Siemens SCALANCE X-200 switches running firmware before 5.0.0. The vulnerability stems from an insufficient entropy source in the web server’s RNG used for session authentication, enabling remote attackers to hijack Web sessions by predicting random values. Documents from NV...

PT-2013-5743

Name of the Vulnerable Software and Affected Versions Siemens SCALANCE X-200 switches versions prior to 5.0.0 Description The issue concerns the authentication implementation in the web server, which does not utilize a sufficient source of entropy for generating random numbers. This makes it easi...

CVE-2013-5709: Undefined Security Weakness

The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value...

AdvancePro Technologies Advanceware software suite vulnerable to privilege bypass

Overview AdvancePro Technologies Advanceware software suite contains a privilege bypass vulnerability, resulting in information leakage CWE-200. Description CWE-200: Information Exposure AdvancePro Technologies Advanceware software suite contains a privilege bypass vulnerability, resulting in...

Fedora 19 : kernel-3.10.9-200.fc19 (2013-15198)

The 3.10.9 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 18 : kernel-3.9.11-200.fc18 (2013-13536)

Update to latest upstream stable release, Linux v3.9.11. Various fixes across the tree. This is the last 3.9.y kernel before F18 will be rebased to 3.10.y. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Siemens SCALANCE X-200 Authentication Bypass Vulnerability

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 01, 2013, and is now being released to the ICS-CERT-Web page. Siemens has identified an authentication bypass vulnerability in the SCALANCE X-200 switch product family. Researcher Eireann Leverett of...

CVE-2013-4631: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 is enabled, allow remote attackers to cause a denial of service device crash via malformed SNMPv3 requests that leverage unspecified overflow issues...