CVE-2016-10088

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNELDS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service use-after-free by leveraging access to a...

PT-2016-3112 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8.13 Description: The issue is related to a use-after-free vulnerability in the kvm ioctl create device function. This vulnerability can be exploited by host OS users to cause a denial of service, resulting in...

How to Configure Default Device Access Behavior of Workspace app for Windows

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149for more information. Citrix Virtual Apps and Desktops, formerly XenDesktop, fits the enterprise need to bring both VDI and...

Android Will Alert You When A New Device Logs-in Your Google Account

Google has rolled out a new feature for Android users to keep its users account more secure: Native Android Push Notification when a new device accesses your Google account. Google has already been offering email notification for newly added devices, but since people usually ignore emails, the te...

Hikvision video encoding Device Access Gateway /transformServer/serverConfigInfo.php injection vulnerability

No description provided by source...

Android Setup Wizard elevation of privilege vulnerability (CNVD-2016-02039)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.Setup Wizard is one of the installation wizard components. An elevation of privilege vulnerability exists in Android's Setup Wizard. An attacker can use this vulnerability to bypass...

Unable to access the Store on the Mobile device if XenMobile is behind firewall

When trying device enrollment in MDM+MAM mode, user was unable to reach the Store...

CVE-2014-7207

A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6selectident function calls, which allows local users to cause a denial of service NULL pointer dereference and system crash by leveraging 1 tun or 2 macvtap devic...

Cisco Unified Interaction Manager Web Interface Authorization Bypass Vulnerability

A vulnerability in the Cisco Unified Interaction Manager web interface could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. The vulnerability is due to insufficient validation of user-supplied data against the application authorization contr...

Cisco WebEx Meeting Center GET Parameter Vulnerability

A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to view sensitive information that is transmitted in GET parameters or perform SQL injection. The vulnerability is due to the inclusion of sensitive information in the URL as GET parameters. An attacker...

CVE-2015-4080

CVE-2015-4080 affects the Kankun Smart Socket device and its mobile app. The vulnerability stems from a hardcoded AES-256 key used to encrypt communications, enabling remote attackers on the local network to sniff traffic and potentially encrypt messages to gain access to the device. Public sourc...

QEMU Denial of Service Vulnerability (CNVD-2015-02254)

QEMU is an open source emulator software. QEMU suffers from a denial of service vulnerability that allows a local HVM user to cause a denial of service by disabling memory or I/O PCI Express for decoding devices, and accessing the device to trigger a response to an unsupported request...

Multiple ASUS RT Router Cross-Site Request Forgery Vulnerabilities

ASUS RT Series Routers is a wireless router device. A cross-site request forgery vulnerability exists in multiple ASUS RT Routers and can be exploited by an attacker to perform certain unauthorized actions and gain access to affected devices...

Huawei WS318 Predictive Random Number Generator Vulnerability

The Huawei WS318 is a wireless router. A vulnerability in the Huawei WS318 predictive random number generator allows remote attackers to launch a brute force attack to crack passwords and gain access to the device...

LinkedIn Boosts Security With New Session Alert and Privacy Control Tools

With a need to give more controls in users’ hands, LinkedIn has introduced a few new security features that the company says will help users of the social network for professionals keep their accounts and data more secure. SESSION ALERTS Just like Google, Facebook, Yahoo and other online services...

PT-2014-2598 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.x through 3.x Description: The issue is a stack-based buffer overflow in the acdb ioctl function in audio acdb.c in the acdb audio driver. This allows attackers to gain privileges via an application that leverages...

Easy FTP Pro v4.2 iOS - Command Inject Vulnerabilities

Document Title: =============== Easy FTP Pro v4.2 iOS - Command Inject Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1291 Release Date: ============= 2014-08-06 Vulnerability Laboratory ID VL-ID: ==================================== 129...

kernel: block: floppy: privilege escalation via FDRAWCMD floppy ioctl command

A flaw was found in the way the Linux kernel's floppy driver handled user space provided data in certain error code paths while processing FDRAWCMD IOCTL commands. A local user with write access to /dev/fdX could use this flaw to free using the kfree function arbitrary kernel memory. CVE-2014-173...

Cisco Unified Communications Manager CDR Management Vulnerability

A vulnerability in Call Detail Records CDR Management of Cisco Unified Communications Manager Cisco Unified CM could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to extraneous information included in the web page. An attacker could exploit thi...

Cisco Secure ACS Portal Session Management Vulnerability

A vulnerability in the portal interface of Cisco Secure Access Control System ACS could allow an authenticated, remote attacker to access the portal with the access capabilities of another user. The vulnerability is due to insufficient session management in the portal. An attacker could exploit...