CVE-2015-1865

CVE-2015-1865 affects coreutils 8.4, specifically the fts.c component, enabling local users to delete arbitrary files. The provided documents state the vulnerable code path and the impact (local deletion) but do not provide any remediation, mitigation steps, or patch version details. No exploitat...

CVE-2017-10131

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with netwo...

PT-2017-5202 · Cisco · Asa 5540 +10

Name of the Vulnerable Software and Affected Versions: ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance ASA Software versions 9.4.x through 9.4.0, 9.2.x through 9.2.3, 8.4.x through 8.4.6, 8.2.x through 8.2.4 ASA 5510 Adaptive Security Appliance Adaptive Security Appliance ASA...

CVE-2017-7486

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pgusermappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server...

Design/Logic Flaw

Vulnerability in the Oracle SuperCluster Specific Software component of Oracle Sun Systems Products Suite subcomponent: Backup/Restore Utility. Supported versions that are affected are 2.3.8 and 2.3.13. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the...

CVE-2016-9164

Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management formerly CA Nimsoft Monitor 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap formerly CA Nimsoft Monitor Snap allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2016-6367

Cisco Adaptive Security Appliance ASA Software before 8.41 on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA...

PT-2016-2535 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions prior to 8.41 Description: The issue is caused by a buffer overflow in the Cisco Adaptive Security Appliance software. It allows an authenticated, local attacker to potentially execute...

Dell OpenManage Server Administrator Directory Traversal Vulnerability (Apr 2016)

Dell OpenManage Server Administrator is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-1295

CVE-2016-1295 affects Cisco ASA Software 8.4. An unauthenticated, remote attacker can disclose sensitive data during a Cisco AnyConnect client authentication attempt, including the ASA software version. The underlying issue is improper protection of sensitive data during the authentication proces...

Design/Logic Flaw

The XML parser in the management interface in Cisco Adaptive Security Appliance ASA Software 8.4 allows remote authenticated users to cause a denial of service device crash via a crafted XML document, aka Bug ID CSCut14223...

Cisco ASA Multiple OpenSSL Vulnerabilities (cisco-sa-20150612-openssl)

Cisco ASA is prone to multiple vulnerabilities in the OpenSSL library. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Cisco ASA VPN ISAKMP DoS Vulnerability (cisco-sa-20151021-asa-ike)

A vulnerability in the IKE code of Cisco ASA may lead to a denial of service. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

APPLE-SA-2015-10-15-1 Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6

APPLE-SA-2015-10-15-1 Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6 Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6 are now available which address the following: Keynote, Pages, and Numbers Available for: OS X Yosemite v10.10.4 or later, iOS 8.4 or later Impact: Opening a...

DLA-329-1 postgresql-8.4 - security update

Bulletin has no description...

Untethered TaiG Jailbreak Tool for iOS 8.4 [Mac OS X version] Released

Good news for iOS 8.4 users! The Chinese jailbreaking team TaiG has finally released its long-awaited Untethered Jailbreak tool for Apple's iOS 8.4 mobile operating system for the Mac OS X platform. Yes, TaiG Jailbreak is now officially available for OS X users that will allow you to jailbreak iO...

Image Transfer IOS - Remote Crash Proof Of Concept Exploit

Exploit for iOS platform in category dos / poc !/usr/bin/perl -w Title : Image Transfer IOS - Remote Crash Proof Of Concept Affected Versions: All Version Tested on IOS 8.4 12h143 / 2.0 Itunes link : https://itunes.apple.com/us/app/image-transfer-photo-video/id588696602?mt=8 EDB note: Might requi...

Cisco ASA SNMP DoS Vulnerability (Cisco-SA-20150701-CVE-2015-4238)

Cisco ASA is prone to an SNMP Denial of Service vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

APPLE-SA-2015-06-30-1 iOS 8.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2015-06-30-1 iOS 8.4 iOS 8.4 is now available and addresses the following: Application Store Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A malicious universal provisioning profile app ma...

CVE-2015-3728

The WiFi Connectivity feature in Apple iOS before 8.4 allows remote Wi-Fi access points to trigger an automatic association, with an arbitrary security type, by operating with a recognized ESSID within an 802.11 network's coverage area...