Threat Outbreak Alert RuleID32358: Email Messages Distributing Malicious Software on April 4, 2018

Medium Alert ID: 57323 First Published: 2018 April 4 20:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32358 may contain the following files: Name | Siz...

werkenvakmanschap.nl XSS vulnerability

Open Bug Bounty ID: OBB-597032 Description| Value ---|--- Affected Website:| werkenvakmanschap.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ceibamayarealty.com XSS vulnerability

Open Bug Bounty ID: OBB-596885 Description| Value ---|--- Affected Website:| ceibamayarealty.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

NTP Server Protocol Version 4 Detection

Binary data 700231.prm...

skia/api_raster_n32_canvas: Heap-buffer-overflow in sse2::srcover_bgra_NUMBER

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6233351313686528 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

CVE-2018-9145

In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size. A large size value may lead to a SIGABRT during an attempt at memory allocation. NOTE: some third parties have been unable to reproduce the SIGABRT when using the...

Design/Logic Flaw

A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...

CVE-2018-0157

A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...

RHEL 7 : collectd (RHSA-2018:0560)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0560 advisory. collectd is a small C-language daemon, which reads various system metrics periodically and updates RRD files creating them if necessary. Because the...

CVE-2018-8932

The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4...

Improper access control

The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4...

CVE-2018-8932

The CVE-2018-8932 issue concerns AMD Ryzen/Ryzen Pro processors with insufficient access control in the Secure Processor (RYZENFALL-2/3/4). The available connected documents confirm a processor-embedded access-control weakness rather than a software-only flaw. Root cause: inadequate enforcement w...

CVE-2018-8932

The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4...

GE Infinia/Infinia with Hawkeye 4 Authentication Bypass Vulnerability

GE Infinia/Infinia with Hawkeye 4 is an American General Electric GE medical imaging device using gamma rays equipped with the Hawkeye 4 system. A security vulnerability exists in GE Infinia/Infinia with Hawkeye 4 that stems from the program's use of default credentials or hard-coded credentials....

CVE-2017-14002

GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

Authentication flaw

GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

CVE-2017-14002

GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

CVE-2018-1068

A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory...

Samba 4.x Password Change Vulnerability

On a Samba 4 AD DC any authenticated user can change other users' passwords over LDAP, including the passwords of administrative users and service accounts. ==================================================================== == Subject: Authenticated users can change other users' password == ==...

librawspeed/Cr2DecompressorFuzzer: Use-after-poison in void rawspeed::Cr2Decompressor::decodeN_X_Y<4, 1, 1>

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5657069119078400 Project: librawspeed Fuzzer: afllibrawspeedCr2DecompressorFuzzer Fuzz target binary: Cr2DecompressorFuzzer Job Type: aflasanlibrawspeed Platform Id: linux Crash Type:...