ntpd Denial of Service Vulnerability (CNVD-2016-03823)

ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A denial of service vulnerability exists in ntpd versions prior to 4.2.8p7. An attacker can exploit this vulnerability by sending a...

Unspecified vulnerability in ntpd (CNVD-2016-03822)

ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. An unspecified vulnerability exists in NTP.org ntpd versions prior to 4.2.8p8. An attacker can exploit this vulnerability by sending...

ntpd system time modification vulnerability (CNVD-2016-02740)

ntpd is an operating system daemon that uses the Network Time Protocol to keep synchronized with the system time of a time server. A security vulnerability in ntpd allows a remote attacker to modify a client's system time by forging packets and changing the basic client/server mode to an...

ntpd crypto NAK Packet Denial of Service Vulnerability

ntpd is an operating system daemon that uses the Network Time Protocol to keep synchronized with the system time of a time server. A security vulnerability exists in ntpd that allows remote attackers to send crypto NAK packets with forged source addresses for denial-of-service attacks...

Transparent SSL TLS interception: SSLsplit

Transparent SSL TLS interception: SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis, web application security testing, network security auditing, penetration testing and...

apache-cxf: SAML SSO processing is vulnerable to wrapping attack

It was found that Apache CXF permitted wrapping attacks in its support for SAML SSO. A malicious user could construct a SAML response that would bypass the login screen and possibly gain access to restricted information or resources...

Qolsys IQ Panel Using Hardcoded Encryption Keys Vulnerability

Qolsys IQ Panel is an Android OS based touch screen controller for home automation devices and features. A security vulnerability exists in Qolsys IQ Panel versions prior to 1.5.1. A remote attacker can exploit the vulnerability to create a digital signature for code by cleverly constructing...

NTP Denial of Service Vulnerability (CNVD-2015-07020)

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP versions prior to 4.2.8p4 and 4.3.x prior to 4.3.77. due to the client failing to properly validate the timestamp field in a Kiss-of-Death...

IBM Cognos Disclosure Management Input Validation Vulnerability

IBM Cognos Disclosure Management CDM is a suite of financial reporting and process automation solutions from IBM USA. A security vulnerability exists in IBM CDM version 10.2.4 and earlier. An attacker can exploit this vulnerability to conduct a man-in-the-middle attack and gain access by forging ...

EAP: CSRF vulnerability in EAP & WildFly Web Console

It was discovered that when uploading a file using a multipart/form-data submission to the EAP Web Console, the Console was vulnerable to Cross-Site Request Forgery CSRF. This meant that an attacker could use the flaw together with a forgery attack to make changes to an authenticated instance...

Securifi Almond Man-in-the-Middle Attack Vulnerability

Securifi Almond is a wireless router product from Securifi. A man-in-the-middle attack vulnerability exists in Securifi Almond. It allows remote attackers to forge a response by using a linear algorithm to select the ID value in the header when the program executes a DNS query...

Foreman Man-in-the-Middle Attack Vulnerability

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman versions prior to 1.7.4, which stems from the program's failu...

CVE-2015-4534

Java Method Server JMS in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated users to execute arbitrary code by forging a signature for a query string that lacks the methodverb parameter...

Cisco ASA uRPF Checksum Bypass Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. The Cisco Adaptive Security Appliance uRPF has a security vulnerability. Due to failure to properly verify the uRPF of an external interface IP message, if the IP address...

Cisco TelePresence IP Gateway Authentication Bypass

The vulnerability of the microprogramming software of the Cisco TelePresence IP Gateway device is related to the falsification of inter-site requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the authentication data of arbitrary users...

F21 JWT fails to verify token signatures

Overview JWT provided by F21 is a PHP library for handling JSON Web Tokens. php-jwt contains a vulnerability where it fails to verify token signatures. Toshiharu Sugiyama of DeNA Co., Ltd. and Shuntaro Maeda reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

pcs: improper web session variable signing

It was found that the pcs daemon did not sign cookies containing session data that were sent to clients connecting via the pcsd web UI. A remote attacker could use this flaw to forge cookies and bypass authorization checks, possibly gaining elevated privileges in the pcsd web UI...

OpenStack s3_token encryption issue vulnerability

OpenStack Keystone is a collaboration between the National Aeronautics and Space Administration NASA and Rackspace, Inc. to develop a project for authentication that provides identity, token, directory, and policy services.OpenStack keystonemiddleware formerly known as python-keystoneclient is on...

Updated cups-filters packages fix CVE-2015-2265

Updated cups-filters package fixes security vulnerability: cups-browsed in cups-filters before 1.0.66 contained a bug in the removebadchars function, where it failed to reliably filter out illegal characters if there were two or more subsequent illegal characters, allowing execution of arbitrary...

UBUNTU-CVE-2015-0259

OpenStack Compute Nova before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage...