DEBIAN-CVE-2017-13077

Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

ALPINE-CVE-2017-13077

Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

CVE-2017-13082: Reusing a Nonce, Key Pair in Encryption

Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the fast BSS transmission FT handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

CVE-2017-13081: Reusing a Nonce, Key Pair in Encryption

Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key IGTK during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients...

CVE-2017-13081

Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key IGTK during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients...

UBUNTU-CVE-2017-13086

Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Tunneled Direct-Link Setup TDLS Peer Key TPK during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

UBUNTU-CVE-2017-13082

Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the fast BSS transmission FT handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

UBUNTU-CVE-2017-13088

Wi-Fi Protected Access WPA and WPA2 that support 802.11v allows reinstallation of the Integrity Group Temporal Key IGTK when processing a Wireless Network Management WNM Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients...

UBUNTU-CVE-2017-13080

Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Group Temporal Key GTK during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients...

UBUNTU-CVE-2017-13078

Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Group Temporal Key GTK during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients...

CVE-2017-1000255

A flaw was found in the Linux kernel's handling of signal frame on PowerPC systems. A malicious local user process could craft a signal frame allowing an attacker to corrupt memory...

EyesOfNetwork web interface cross-site scripting vulnerability (CNVD-2017-33356)

EyesOfNetwork "EON" is an open source solution that combines practical ITIL processes with a technical interface that allows its workday program. A cross-site scripting vulnerability exists in the EyesOfNetwork web interface, which allows a remote authenticated user to inject arbitrary web script...

PT-2017-10944

Name of the Vulnerable Software and Affected Versions Linux versions 4.9-rc1 and later, with CONFIG PPC TRANSACTIONAL MEM enabled Description A flaw in the Linux kernel allows a user process to craft a signal frame and trigger an exception, enabling an attacker to overwrite arbitrary kernel memor...

UBUNTU-CVE-2017-1000255

On Linux running on PowerPC hardware Power8 or later a user process can craft a signal frame and then do a sigreturn so that the kernel will take an exception interrupt, and use the r1 value from the signal frame as the kernel stack pointer. As part of the exception entry the content of the signa...

CVE-2017-12258

A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. The vulnerability exists because the affected software does not provide sufficient protections for HTML inline frames iframes...

CVE-2017-12258

CVE-2017-12258 affects Cisco Unified Communications Manager (CUCM) Web UI. The flaw stems from insufficient protections for HTML inline frames (iframes), enabling an unauthenticated, remote attacker to direct a user to a page containing a malicious iframe to perform a click-jacking/XSF-style brow...

CVE-2017-12258: Improper Link Resolution Before File Access

A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. The vulnerability exists because the affected software does not provide sufficient protections for HTML inline frames iframes...

Cisco Unified Communications Manager Cross-Frame Scripting Vulnerability

A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. The vulnerability exists because the affected software does not provide sufficient protections for HTML inline frames iframes...

baraa.1000mashin.mn XSS vulnerability

Vulnerable URL: http://baraa.1000mashin.mn/frame/?url=%22/%3E%3C/script%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E%3C Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

PT-2017-12445

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series Routers affected versions not specified Description A vulnerability in the gRPC code could allow an unauthenticated, remote attacker to cause a denial of service DoS...