656 matches found
CVE-2015-3725
MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service ID collision and Watch launch outage via a crafted universal provisioning profile app...
CVE-2015-3722
CVE-2015-3722 concerns Apple iOS before 8.4 where the universal provisioning profile install logic did not ensure bundle ID uniqueness, enabling an attacker to trigger a collision that could prevent apps from launching (denial of service). The connected sources note that Apple addressed this in i...
Tai Chi jailbreak major security Backdoor-vulnerability warning-the black bar safety net
Tai Chi jailbreak iOS8. 1. 3-8. 4 contains a major security back door, escape after causing any the APP can extract right to the Root, thereby affecting the user data safe. For example to obtain Root permission after full control of system files, and even further to install Trojans and other...
PT-2015-1620 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.47 through 8.61.2 Description: The issue is related to the SNMP implementation and is caused by resource management errors. It allows a remote authenticated user to cause a denial of...
Apple iOS < 8.4 Multiple Vulnerabilities (Logjam)
Binary data appleios84check.nbin...
Cisco ASA VPN XML Parser DoS Vulnerability (cisco-sa-20150408-asa)
Cisco ASA is prone to a DoS vulnerability in the VPN XML Parser. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Hacker Demonstrates iOS 8.4 Jailbreak
Quite surprising but the just released Apple’s iOS 8.4 beta has been jailbroken by a well-known hacker. Yes, the first beta of iOS 8.4 released by Apple to the developers last week has been jailbroken by Stefan Esser, commonly known as "i0n1c" in the jailbreak community. i0n1c has also shared a...
Cisco ASA IKEv2 DoS Vulnerability (cisco-sa-20141008-asa)
A vulnerability in the IKEv2 code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause the reload of an affected system. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
CVE-2014-8612
Multiple array index errors in the Stream Control Transmission Protocol SCTP module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allow local users to 1 gain privileges via the stream id to the setsockopt function, when setting the SCTIPSSVALUE option, or 2 read...
CVE-2014-3384
The IKEv2 implementation in Cisco ASA Software 8.4 before 8.47.15, 8.6 before 8.61.14, 9.0 before 9.04.8, and 9.1 before 9.15.1 allows remote attackers to cause a denial of service device reload via a crafted packet that is sent during tunnel creation, aka Bug ID CSCum96401...
[DLA-0019-1] postgresql-8.4 update
Debian Security Advisory DLA-0019-1 https://wiki.debian.org/LTS - ---------------------------------------------------------------------------- Package : postgresql-8.4 Version : 8.4.22-0+deb6u1 CVE ID : CVE-2014-0067 New upstream minor release. Users should upgrade to this version at their next...
eNdonesia 8.4 - SQL Injection Vulnerability
No description provided by source. ======================================================================/ eNdonesia 8.4 Print Module SQL Injection Vulnerability Download : http://sourceforge.net/projects/endonesia/files/eNdonesia Version : 8.4 or lower maybe also affected Dork :...
Hilgraeve HyperAccess 8.4 - Multiple Remote Command Execution Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21594/info Hilgraeve HyperACCESS is prone to multiple remote command-execution vulnerabilities. Attackers can exploit these issues to execute arbitrary application commands with the privileges of the affected application....
eNdonesia 8.4 mod.php viewarticle Action artid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/24590/info eNdonesia is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...
Password Door 8.4 Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33634/info Password Door is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the...
CVE-2014-3000
The TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before p2 allows remote attackers to cause a denial of service undefined memory access and system crash or possibly read system memory via multiple crafted packets,...
Code injection
Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.4 before 8.47.5, 8.7 before 8.71.11, 9.0 before 9.03.10, and 9.1 before 9.13.4 allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496...
JORJWEB Ltda SQL Injection
Document Title: =============== JORJWEB Ltda all versions - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1212 Release Date: ============= 2014-02-21 Vulnerability Laboratory ID VL-ID: ==================================== 12...
PostgreSQL 8.4 < 8.4.20 / 9.0 < 9.0.16 / 9.1 < 9.1.12 / 9.2 < 9.2.7 / 9.3 < 9.3.3 Multiple Vulnerabilities
The version of PostgreSQL installed on the remote host is 8.4.x prior to 8.4.20, 9.0.x prior to 9.0.16, 9.1.x prior to 9.1.12, 9.2.x prior to 9.2.7 or 9.3.x prior to 9.3.3. It is, therefore, potentially affected by multiple vulnerabilities : - SET ROLE bypasses lack of ADMIN OPTION when granting...
