FreeBSD bsnmpd Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: FreeBSD bsnmpd information disclosure Advisory URL: https://pierrekim.github.io/advisories/CVE-2015-5677-freebsd-bsnmpd.txt Blog URL: https://pierrekim.github.io/blog/2016-01-15-cve-2015-5677-freebsd-bsnmpd.html Date...

Vulnerability warning: the application server glassfish arbitrary file read vulnerability-vulnerability warning-the black bar safety net

1 http://localhost:4848/theme/META-INF/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd java voice will put the"%c0%ae"resolved to"\uC0AE",and finally escape to ASCCII character"." Point. Jane simple singl...

Design/Logic Flaw

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.kPE and ZXV10 W300 devices W300V1.0.0fER1PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a different vulnerability than CVE-2015-7248...

CVE-2015-8703

CVE-2015-8703 affects ZTE ZXHN H108N R1A (before ZXHNH108NR1A.k_PE) and ZXV10 W300 (W300V1.0.0f_ER1_PE). Root cause: remote authenticated users can read the device configuration file to bypass access restrictions and discover credentials and keys. Impact: information disclosure (credentials/keys)...

CVE-2015-8703

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.kPE and ZXV10 W300 devices W300V1.0.0fER1PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a different vulnerability than CVE-2015-7248...

CVE-2015-8703: Exposure of Sensitive Information to an Unauthorized Actor

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.kPE and ZXV10 W300 devices W300V1.0.0fER1PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a different vulnerability than CVE-2015-7248...

PT-2015-7819

Name of the Vulnerable Software and Affected Versions ZTE ZXHN H108N R1A versions before ZTE.bhs.ZXHNH108NR1A.k PE ZTE ZXV10 W300 versions before W300V1.0.0f ER1 PE Description The issue allows remote authenticated users to bypass intended access restrictions and discover credentials and keys by...

Honeywell Midas Gas Detector path traversal Vulnerability, CVE-2 0 1 5-7 9 0 7-a vulnerability warning-the black bar safety net

Affected system: Honeywell Midas gas detectors 1. 13b3 Honeywell Midas Black gas detectors 2. 13b3 Description: CVECAN ID: CVE-2 0 1 5-7 9 0 7 Midas and Midas Black gas detectors is to test the toxic gas, combustible gas and the outside gas of the detector. Honeywell Midas gas detectors 1. 13b3...

CVE-2015-7907

Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors...

CVE-2015-7907

CVE-2015-7907 affects Honeywell Midas and Midas Black gas detectors. The web server authentication can be bypassed via a directory traversal vulnerability, allowing remote actors to write to a configuration file or trigger calibration/test. Affected versions: Midas before 1.13b3 and Midas Black b...

CVE-2015-7907

Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors...

CVE-2015-7907: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors...

PT-2015-7664

Name of the Vulnerable Software and Affected Versions Honeywell Midas gas detectors versions prior to 1.13b3 Honeywell Midas Black gas detectors versions prior to 2.13b3 Description A directory traversal issue in the web server of Honeywell gas detectors allows remote attackers to bypass...

CentOS 7 : grub2 (CESA-2015:2401)

Updated grub2 packages that fix one security issue, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

unbound security update

CentOS Errata and Security Advisory CESA-2015:2455 Updated unbound packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base...

Ubuntu 14.04 LTS : IcedTea Web vulnerabilities (USN-2817-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2817-1 advisory. It was discovered that IcedTea Web incorrectly handled applet URLs. A remote attacker could possibly use this issue to inject applets into the...

CVE-2015-5281

The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux RHEL 7, when used on UEFI systems, allows local users to bypass intended Secure Boot restrictions and execute non-verified code via a crafted 1 multiboot or 2 multiboot2 module in the configuration file or physically proximate attacke...

CVE-2015-5281

CVE-2015-5281 affects GRUB2 on EFI systems (notably grub2 in RHEL7) where modules deemed unsuitable for Secure Boot could be loaded, allowing a local attacker to bypass Secure Boot and execute non-verified code via crafted multiboot/multiboot2 modules or boot menu entries. The issue arises from l...

RHEL 7 : Red Hat Ceph Storage 1.3.1 (RHSA-2015:2066)

Red Hat Ceph Storage 1.3.1 that fixes one security issue, multiple bugs, and adds various enhancements is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...