4452 matches found
CVE-2018-1000155
OpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization vulnerability in OpenFlow handshake: The DPID DataPath IDentifier in the featuresreply message are inherently trusted by the controller. that can result in Denial of Service, Unauthorized Access, Network...
Radius server test connectivity fails : Error: 1812/udp' is not a valid Radius authentication port
If you have Radius Load Balancing Virtual Server pointed in the Radius profile then the Test connectivity fails. If you configure the Radius Profile to point it directly to the Radius Server, then it works. Error: 1812/udp' is not a valid Radius authentication port or Radius client is not...
FAQ: XenMobile Server Support
This article contains answers to the frequently asked questions on XenMobile Server Support. General What is XenMobile Server Support? How do I get to the support page on App Controller server? In which version of App Controller Support feature is available? What are the browsers and platforms...
FAQ: Badge Behavior and Notifications Behavior for End Users
This article provides frequently asked questions and answers for Badge behavior and Notifications behavior. Badge Behaviour for End Users Q: What does the badge count represent? A : The badge count represents the total number of unread count of mails for your entire inbox folder. Q: Do I still ha...
PT-2018-1377
Name of the Vulnerable Software and Affected Versions Android versions prior to a fixed version affected versions not specified Description A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPA IOC NOTIFY WAN UPSTREAM ROUTE ADD, IPA IOC NOTIFY WAN UPSTREAM ROUTE DEL,...
EulerOS 2.0 SP2 : mercurial (EulerOS-SA-2018-1112)
According to the versions of the mercurial package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects. - Securi...
Ruby: Invalid URL parsing '#'
URI is not correctly parsed when "" is included in the URL. Therefore, could instead be tricked into connecting to a different host. PoC bash $ ruby --version ruby 2.4.1p111 2017-03-22 revision 58053 x8664-darwin16 ruby require 'uri' uri = URI"http://[email protected]/test" = p...
MS08-037: Description of the security update for DNS in Windows Server 2003, in Windows XP, and in Windows 2000 Server (client side): July 8, 2008
MS08-037: Description of the security update for DNS in Windows Server 2003, in Windows XP, and in Windows 2000 Server client side: July 8, 2008 INTRODUCTION Microsoft has released security bulletin MS08-037. To view the complete security bulletin, visit one of the following Microsoft Web sites:...
Drupal 7.58 8.3.9 8.4.6 8.5.1 - Drupalgeddon2 Remote Code Execution
Drupal 7.58 8.3.9 8.4.6 8.5.1 - Drupalgeddon2 Remote Code Execution !/usr/bin/env ruby CVE-2018-7600 Drupal &1' ; " bashcmd = "echo " + Base64.strictencode64bashcmd + " | base64 -d" - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Function httprequest type data def...
Design/Logic Flaw
If all 64 digits of the connectivity association name CKN key or all 32 digits of the connectivity association key CAK key are not configured, all remaining digits will be auto-configured to 0. Hence, Juniper devices configured with short MacSec keys are at risk to an increased likelihood that an...
CVE-2018-0021
If all 64 digits of the connectivity association name CKN key or all 32 digits of the connectivity association key CAK key are not configured, all remaining digits will be auto-configured to 0. Hence, Juniper devices configured with short MacSec keys are at risk to an increased likelihood that an...
CVE-2018-0021
CVE-2018-0021 affects Junos OS when MacSec CKN/CAK keys are configured with short values. If all 64 CKN digits or all 32 CAK digits are not configured, remaining digits auto-configure to 0, increasing the feasibility of dictionary/brute-force attacks to recover key material via spoofed packets. A...
CVE-2018-2409
Improper session management when using SAP Cloud Platform 2.0 Connectivity Service and Cloud Connector. Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform...
CVE-2018-2409
Improper session management when using SAP Cloud Platform 2.0 Connectivity Service and Cloud Connector. Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform...
CVE-2018-2409: Session Fixation
Improper session management when using SAP Cloud Platform 2.0 Connectivity Service and Cloud Connector. Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform...
PT-2018-15538
Name of the Vulnerable Software and Affected Versions SAP Cloud Platform version 2.0 Description The issue concerns improper session management in SAP Cloud Platform 2.0, specifically affecting the Connectivity Service and Cloud Connector. This can lead to unauthorized access to or modification o...
Debian: Security Advisory (DLA-1329-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 1331-1] mercurial security update
Package : mercurial Version : 2.2.2-4+deb7u7 CVE ID : CVE-2018-1000132 Debian Bug : 892964 Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network...
[SECURITY] [DLA 1329-1] memcached security update
Package : memcached Version : 1.4.13-0.2+deb7u4 CVE ID : CVE-2018-1000127 Debian Bug : 894404 memcached version prior to 1.4.37 contains an Integer Overflow vulnerability that can result in data corruption and deadlocks. This attack is exploitable via network connectivity to the memcached service...