1574 matches found
NAK to the Future: NTP Symmetric Association Authentication Bypass Vulnerability
Talos Vulnerability Report TALOS-2015-0069 NAK to the Future: NTP Symmetric Association Authentication Bypass Vulnerability October 21, 2015 CVE Number CVE-2015-7871 Summary Unauthenticated off-path attackers can force ntpd processes to peer with malicious time sources of the attacker’s choosing...
association-moniquedudreuilh.fr XSS vulnerability
Vulnerable URL: http://www.association-moniquedudreuilh.fr/search/site/?q=%3C/title%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:44 GMT Vulnerability type:| XSS Vulnerability status:|...
Innominate mGuard IPsec SA establishment process denial of service vulnerability
The IPsec SA establishment process on Innominate mGuard device is an IPsec SA establishment process from Innominate, Germany, that runs on a family of network security appliances including firewalls and VPNs. A security vulnerability exists in the IPsec SA establishment process in Innominate mGua...
[SECURITY] Fedora 22 Update: wpa_supplicant-2.4-4.fc22
wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...
propertymanagementmiassoc.wliinc32.com Open Redirect vulnerability
Vulnerable URL: http://propertymanagementmiassoc.wliinc32.com/CWT/External/WCPages/WCBanners/BannerReferral.aspx?ProfileID=12847=32=0=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:39 GMT Vulnerability type:| Open Redire...
The Pirate Bay Founders Free Of Criminal Copyright Case
The four co-founders of The Pirate Bay, the world’s most popular torrent website, have been cleared of charges alleging criminal copyright infringement and abuse of electronic communications in a Belgian court. The Pirate Bay co-founders Gottfrid Svartholm, Fredrik Neij, Peter Sunde and Carl...
CVE-2015-3728
The WiFi Connectivity feature in Apple iOS before 8.4 allows remote Wi-Fi access points to trigger an automatic association, with an arbitrary security type, by operating with a recognized ESSID within an 802.11 network's coverage area...
Design/Logic Flaw
The WiFi Connectivity feature in Apple iOS before 8.4 allows remote Wi-Fi access points to trigger an automatic association, with an arbitrary security type, by operating with a recognized ESSID within an 802.11 network's coverage area...
WAIDPS - Wireless Auditing, Intrusion Detection & Prevention System
WAIDPS is an open source wireless swissknife written in Python and work on Linux environment. This is a multipurpose tools designed for audit penetration testing networks, detect wireless intrusion WEP/WPA/WPS attacks and also intrusion prevention stopping station from associating to access point...
Medium: kernel
Issue Overview: A buffer overflow flaw was found in the way the Linux kernel's Intel AES-NI instructions optimized version of the RFC4106 GCM mode decryption functionality handled fragmented packets. A remote attacker could use this flaw to crash, or potentially escalate their privileges on, a...
[SECURITY] Fedora 20 Update: wpa_supplicant-2.0-13.fc20
wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...
Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI
A buffer overflow flaw was found in the way the Linux kernel's Intel AES-NI instructions optimized version of the RFC4106 GCM mode decryption functionality handled fragmented packets. A remote attacker could use this flaw to crash, or potentially escalate their privileges on, a system over a...
Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI
A buffer overflow flaw was found in the way the Linux kernel's Intel AES-NI instructions optimized version of the RFC4106 GCM mode decryption functionality handled fragmented packets. A remote attacker could use this flaw to crash, or potentially escalate their privileges on, a system over a...
The hacker can bypass the validation into a malicious software-vulnerability warning-the black bar safety net
From the last Association is exposure products pre-installed potentially dangerous software last only 3 months, the company again outgoing security. According to security firm IOActive claim that they in the Lenovo System Update software found on the major vulnerabilities, a hacker can bypass the...
UBUNTU-CVE-2015-1245
Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/locationbar/openpdfinreaderview.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other...
chromium-browser: Use-after-free in PDFium
Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/locationbar/openpdfinreaderview.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other...
[SECURITY] [DLA 192-1] ntp security update
Package : ntp Version : 1:4.2.6.p2+dfsg-1+deb6u3 CVE ID : CVE-2015-1798 CVE-2015-1799 Debian Bug : 782095 Brief introduction CVE-2015-1798 When ntpd is configured to use a symmetric key to authenticate a remote NTP server/peer, it checks if the NTP message authentication code MAC in received...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none...
