517 matches found
Policies and Applications are not pushing to iOS devices from Xenmobile (Proxy Enabled Environment)
The device information is not fetched completely on XenMobile and under device setting on XenMobile console we don't see any assigned delivery group. The test connectivity is successful In the Debug logs you can see : | ERROR | pool-47-thread-1 | com.notnoop.apns.internal.ApnsConnectionImpl |...
BSA-2017-373
Security Advisory ID : BSA-2017-373 Component : NFSv4 Revision : 2.0: Interim The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is...
Explained: user agent
If you are the kind of person that uses different browsers or different devices to access websites, you may have noticed that many sites can look quite different depending on which browser you are using. When your browser sends a request to a website, it identifies itself with the user agent stri...
kernel: NFSv4 server does not properly validate layout type when processing NFSv4 pNFS LAYOUTGET operand
It was found that the NFSv4 server in the Linux kernel did not properly validate layout type when processing NFSv4 pNFS LAYOUTGET and GETDEVICEINFO operands. A remote attacker could use this flaw to soft-lockup the system and thus cause denial of service...
CVE-2017-11420
Stack-based buffer overflow in ASUSDiscovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RTAC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66UB1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200,...
Design/Logic Flaw
The Android Apps Money Forward prior to v7.18.0, Money Forward for The Gunma Bank prior to v1.2.0, Money Forward for SHIGA BANK prior to v1.2.0, Money Forward for SHIZUOKA BANK prior to v1.4.0, Money Forward for SBI Sumishin Net Bank prior to v1.6.0, Money Forward for Tokai Tokyo Securities prior...
Denial of service
Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service...
PT-2017-7461
Name of the Vulnerable Software and Affected Versions Huawei LogCenter version V100R001C10 Description The issue allows an authenticated attacker to add abnormal device information to the log collection module, resulting in a denial of service. Recommendations For Huawei LogCenter version...
Personalized User Focused Security: Stethoscope
Stethoscope is a web application that collects information from existing device data sources e.g., JAMF or LANDESK on a given user’s devices and gives them clear and specific recommendations for securing their systems. Stethoscope consists of two primary pieces: a Python-based back-end and a...
The vulnerability of the Firefox browser allows a hacker to obtain confidential information about the device and PIN code.
The vulnerability of the Firefox browser improperly restricts access to JavaScript for data related to movement. Exploiting this vulnerability can allow a remote attacker to obtain confidential device information and the PIN code through a specially crafted web page...
CVE-2016-4784
A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...
CVE-2016-4784
A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...
CVE-2015-8108
The management interface in LenovoEMC EZ Media & Backup hm3, ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.1.204.33661 allows remote attackers to obtain sensitive device information via unspecified vectors...
CVE-2015-8108
The management interface in LenovoEMC EZ Media & Backup hm3, ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.1.204.33661 allows remote attackers to obtain sensitive device information via unspecified vectors...
Apple iOS WebKit Information Disclosure Vulnerability (CNVD-2016-01842)
Apple iOS is the operating system used by Apple for a number of smart devices. WebKit is a set of open-source web browser engines developed by KDE, Apple, Google and other companies, and is currently used by browsers such as Apple Safari and Google Chrome. Versions of iOS prior to 9.3 have a...
Cisco Prime Collaboration Assurance Information Disclosure Vulnerability (CNVD-2015-06129)
Cisco Prime Collaboration Assurance is an enterprise collaboration network management solution. The solution supports simplified management of unified communications and video collaboration networks through a unified management console, as well as rapid deployment of communications sites. Cisco...
USBDeview v2.45 - View all installed/connected USB devices on your system
USBDeview is a small utility that lists all USB devices that currently connected to your computer, as well as all USB devices that you previously used. For each USB device, extended information is displayed: Device name/description, device type, serial number for mass storage devices, the date/ti...
Design/Logic Flaw
Cisco Firepower Extensible Operating System 1.11.86 on Firepower 9000 devices allows remote attackers to bypass intended access restrictions and obtain sensitive device information by visiting an unspecified web page, aka Bug ID CSCuu82230...
CVE-2015-4287
Cisco Firepower Extensible Operating System 1.11.86 on Firepower 9000 devices allows remote attackers to bypass intended access restrictions and obtain sensitive device information by visiting an unspecified web page, aka Bug ID CSCuu82230...
D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities
Exploit Title: D-Link DSP-W Arbitrary Arbitrary file upload Date: 30/06/2015 Exploit Author: DNO Vendor Homepage: link Version: w110 v1.05b01 Tested on: linux CVE : N/A ======================================== the only 'filtering' on this resources appears to be a sprintf call which statically...