CVE-2017-9363

Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request...

CVE-2017-9363: Deserialization of Untrusted Data

Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request...

SUSE SLES11 Security Update : mysql (SUSE-SU-2017:1137-1) (Riddle)

This update for mysql to version 5.5.55 fixes the following issues: These security issues were fixed : - CVE-2017-3308: Unspecified vulnerability in Server: DML bsc1034850 - CVE-2017-3309: Unspecified vulnerability in Server: Optimizer bsc1034850 - CVE-2017-3329: Unspecified vulnerability in...

NetIQ Access Manager Cross-Site Scripting Vulnerability (CNVD-2017-06744)

NetIQ Access Manager provides a simple, secure, and scalable solution for handling Web access requirements. A cross-site scripting vulnerability exists in the AssertionConsumerServiceURL field of a signed AuthnRequest in the samlp:AuthnRequest document for NetIQ Access Manager. A remote attacker...

CVE-2017-5183

NetIQ Access Manager 4.2.2 and 4.3.x before 4.3.1+, when configured as an Identity Server, has XSS in the AssertionConsumerServiceURL field of a signed AuthnRequest in a samlp:AuthnRequest document...

PT-2017-13634

Name of the Vulnerable Software and Affected Versions SaltStack Salt versions prior to 2017.7.2 SaltStack Salt versions 2016.11.x prior to 2016.11.8 SaltStack Salt versions 2016.3.x prior to 2016.3.8 Description The issue allows remote attackers to cause a denial of service via a crafted...

F5 Networks BIG-IP : TMM SSO plugin vulnerability (K95444512)

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider SP connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an...

CVE-2017-0004: Improper Input Validation

The Local Security Authority Subsystem Service LSASS in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service reboot via a crafted authentication request, aka "Local Security Authority Subsystem Service Denial of...

PT-2017-1133

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Description The issue exists due to insufficient input validation in the Local Security Authority Subsystem Service LSASS...

Error: "An authentication request was made before establishing a web session"

When going through the NetScaler, the following error is seen in the Event Viewer: An authentication request was made before establishing a web session. This typically occurs when sticky load-balancing between client and StoreFront is misconfigured...

CVE-2016-1402: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Active Directory AD integration component in Cisco Identity Service Engine ISE before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a denial of service authentication outage via a crafted Password Authentication Protocol PAP...

Medium: krb5

Issue Overview: A use-after-free flaw was found in the way the MIT Kerberos libgssapikrb5 library processed valid context deletion tokens. An attacker able to make an application using the GSS-API library libgssapi could call the gssprocesscontexttoken function and use this flaw to crash that...

Amazon Linux AMI : xorg-x11-server (ALAS-2015-470)

Multiple integer overflow flaws and out-of-bounds write flaws were found in the way the X.Org server calculated memory requirements for certain X11 core protocol and GLX extension requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server or, potentially...

Integer overflow

Integer overflow in kbdint.c in modsftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service memory consumption via a large response count value in an authentication request, which triggers a large memory allocation...

CVE-2013-4359

Integer overflow in kbdint.c in modsftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service memory consumption via a large response count value in an authentication request, which triggers a large memory allocation...

PT-2013-5170

Name of the Vulnerable Software and Affected Versions SurgeFTP versions prior to 23d2 Description The issue is caused by a buffer overflow that occurs when a long string is sent within the authentication request, potentially allowing remote attackers to cause a denial of service or possibly execu...

CVE-2013-4742: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string within the authentication request...

Authentication flaw

Cisco Unified Computing System UCS 1.x before 1.44 and 2.x before 2.02m allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller IMC, aka Bug ID CSCts53746...

PT-2013-2549

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.5 through 6.9 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon outage, by sending a crafted authentication request to the IPSSH server. Recommendations For Wind Riv...

CVE-2013-0711: Improper Input Validation

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service daemon outage via a crafted authentication request...