RHEL 7 : kernel (RHSA-2019:2864)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2864 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A buffer overflow flaw was found in the way Lin...

openSUSE Security Update : virtualbox (openSUSE-2019-1814)

This update for virtualbox to version 6.0.10 fixes the following issues : Security issues fixed : - CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863 CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850...

openSUSE: Security Advisory for virtualbox (openSUSE-SU-2019:1814-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-2864

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2019-2864

Summary (CVE-2019-2864) : A vulnerability in the Oracle VM VirtualBox core subcomponent affects VirtualBox versions earlier than 5.2.32 and 6.0.10 . The flaw enables a high-privilege attacker with local access to compromise Oracle VM VirtualBox, with potential takeover of the VirtualBox instance ...

Insteon 2864-222 Buffer Overflow Vulnerability (CNVD-2018-12053 )

Insteon HD IP Camera White 2864-222 is an IP camera product from Insteon USA. A buffer overflow vulnerability exists in the webService binary in Insteon HD IP Camera White 2864-222. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted pid, pwd, or usr...

Insteon 2864-222 Buffer Overflow Vulnerability

Insteon HD IP Camera White 2864-222 is an IP camera product from Insteon USA. A buffer overflow vulnerability exists in the webService binary in Insteon HD IP Camera White 2864-222. An attacker can exploit this vulnerability to hijack the control flow with the help of a specially crafted usr...

CVE-2018-11560

The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp parameter to cgi-bin/CGIProxy.fcgi on port 34100...

CVE-2018-2864

CVE-2018-2864 affects Oracle E-Business Suite, specifically the Oracle Application Object Library diagnostics component. Affected versions are 12.1.3 and 12.2.3–12.2.7. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to read a subset of Oracle Application Object ...

Circle with Disney Weak Authentication Vulnerability(CVE-2017-2864)

Summary An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker resulting in authentication bypass. An attacker can send a series of...

CVE-2017-2864

An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker resulting in authentication bypass. An attacker can send a series of packets t...

CVE-2017-2864

Circle with Disney devices contain CVE-2017-2864 where the authentication token generation is weak, allowing an attacker to trigger authentication bypass by sending crafted requests. The TALOS reports show the vulnerability chain: a GET parameter appid from the user is incorporated into a token f...

Circle with Disney Backup API Command Injection Vulnerability

Summary An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request trigger this vulnerability. Tested Versions Circle with Disney Product URLs...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2017:2864-1)

This update for xen fixes several issues: These security issues were fixed : - CVE-2017-5526: The ES1370 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host...

CVE-2016-2864

Cross-site scripting XSS vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0...

CVE-2016-2864

Summary: CVE-2016-2864 is a cross-site scripting (XSS) vulnerability affecting multiple IBM Jazz-based products (CLM, RQM, RTC, RDNG, RELM, Rhapsody DM, RSA DM) with affected versions ranging from CLM 3.0.1.6 to 6.0.x. The root cause is improper validation of user-supplied input, allowing remote ...

Ubuntu 14.04 LTS : NSS vulnerability (USN-2864-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2864-1 advisory. Karthikeyan Bhargavan and Gaetan Leurent discovered that NSS incorrectly allowed MD5 to be used for TLS 1.2 connections. If a remote attacker were able to perform...

hyatt.com XSS vulnerability

Vulnerable URL: http://www.hyatt.com/ws/typeahead-json-latin?citylimit=2=501=3=515=3=508==496"=jQuery172093841264693383391446414273511=P=full=12=2+x&=1446414354203 Details: Description| Value ---|--- Patched:| Yes, at 31.08.2016 Latest check for patch:| 31.08.2016 09:48 GMT Vulnerability type:| X...

CVE-2015-2864

Retrospect and Retrospect Client suffer from weak password hashing (CVE-2015-2864). Prior to updates, password hashes could collide, enabling a remote attacker with network access to bypass authentication and access backup files. Affected versions include Windows clients before 10.0.2.119, macOS ...

flaticon.com XSS vulnerability

Vulnerable URL: http://www.flaticon.com/authors/sergiu-bagrin?xss'-alert/XSSposed/-'1=1 Details: Description| Value ---|--- Patched:| Yes, at 04.07.2016 Latest check for patch:| 04.07.2016 08:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2864 Google Pageran...