209 matches found
CVE-2018-4853: Missing Authentication for Critical Function
A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to port 69/udp could modify the firmware of the device...
PT-2018-16571
Name of the Vulnerable Software and Affected Versions SICLOCK TC100 All versions SICLOCK TC400 All versions Description A vulnerability has been identified that allows an attacker with network access to port 69/udp to modify the firmware of the device. Recommendations For SICLOCK TC100, restrict...
Solaris 10 (x86) : 119060-69
X11 6.6.2x86: Xsun patch. Date this patch was last updated by Sun : Jul/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 10 (sparc) : 119059-69
X11 6.6.2: Xsun patch. Date this patch was last updated by Sun : Nov/15/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2017-7237
The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69, as demonstrated by a WRQ aka Write reque...
PT-2017-17599
Name of the Vulnerable Software and Affected Versions Spiceworks Inventory version 7.5 Description The issue allows remote attackers to access the Spiceworks data/configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69. This...
DLA-757-1 phpmyadmin - security update
Bulletin has no description...
openSUSE Security Update : phpMyAdmin (openSUSE-2016-1406)
This update to phpMyAdmin 4.4.15.9 fixes security issues and bugs. The following security issues were fixed : - Unsafe generation of $cfg'blowfishsecret' PMASA-2016-58 - phpMyAdmin's phpinfo functionality is removed PMASA-2016-59 - AllowRoot and allow/deny rule bypass with specially crafted...
Cisco ASA - Authentication Bypass 'EXTRABACON' (Improved Shellcode) (69 bytes)
Cisco ASA - Authentication Bypass 'EXTRABACON' Improved Shellcode 69 bytes. Shellcode exploit for Hardware platform ; ; Cisco ASA Authentication Bypass EXTRABACON Better Shellcode 69 bytes ; ; Copyright: c 2016 RiskSense, Inc. https://risksense.com ; License: http://opensource.org/licenses/MIT ;...
Amazon Linux: Security Advisory (ALAS-2012-69)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Uninit memory disclosure via truncated images in Firefox
Yello, The recent release of Firefox 32 fixes another interesting image parsing issue found by afl 1: following a refactoring of memory management code, the past few versions of the browser ended up using uninitialized memory for certain types of truncated images, which is easily measurable with ...
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2014:1099-1)
Mozilla Firefox was updated to Firefox 32 fixing security issues and bugs. Security issues fixed: MFSA 2014-72 / CVE-2014-1567: Security researcher regenrecht reported, via TippingPoint's Zero Day Initiative, a use-after-free during text layout when interacting with the setting of text direction...
openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2014:1098-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MozillaThunderbird: Update to 31.1 release (important)
MozillaThunderbird was updated to Thunderbird 31.1.0 bnc894370, fixinfg security issues: MFSA 2014-67/CVE-2014-1553/CVE-2014-1562 Miscellaneous memory safety hazards MFSA 2014-68/CVE-2014-1563 bmo1018524 Use-after-free during DOM interactions with SVG MFSA 2014-69/CVE-2014-1564 bmo1045977...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow Exploit
No description provided by source. 3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby 3comftpdxpsp2.rb victimhost victimport Defau...
openSUSE Security Update : MozillaFirefox (MozillaFirefox-3422)
This update brings Mozilla Firefox to version 3.6.12, fixing various bugs and security issues. The following security issues were fixed: MFSA 2010-64: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of...
SuSE 11.2 / 11.3 Security Update : Xen (SAT Patch Numbers 8478 / 8479)
XEN has been updated to version 4.2.3 c/s 26170, fixing various bugs and security issues. - XSA-72: Fixed ocaml xenstored that mishandled oversized message replies. CVE-2013-4416 - XSA-63: Fixed information leaks through I/O instruction emulation. CVE-2013-4355 - XSA-66: Fixed information leak...
CVE-2013-0139
The Arecont Vision AV1355DN MegaDome camera allows remote attackers to cause a denial of service video-capture outage via a packet to UDP port 69...
