257 matches found
SUSE-SU-2018:1015-1 Security update for the Linux Kernel (Live Patch 17 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-606448 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability was fixed in the kernel v4l2 video driver. bsc1085447. - CVE-2018-1068: A flaw was found in the Linux kernels implementation of...
SUSE-SU-2018:0992-1 Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-606451 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability was fixed in the kernel v4l2 video driver. bsc1085447. - CVE-2018-1068: A flaw was found in the Linux kernels implementation of...
SUSE-SU-2018:0997-1 Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP3)
This update for the Linux Kernel 4.4.82-66 fixes several issues. The following security issues were fixed: - CVE-2017-13166: Prevent elevation of privilege vulnerability in the v4l2 video driver bsc1085447. - CVE-2018-1068: A flaw in the implementation of 32-bit syscall interface for bridging...
SUSE-SU-2018:1003-1 Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP2)
This update for the Linux Kernel 4.4.114-9267 fixes several issues. The following security issues were fixed: - CVE-2017-13166: Prevent elevation of privilege vulnerability in the v4l2 video driver bsc1085447. - CVE-2018-1068: A flaw in the implementation of 32-bit syscall interface for bridging...
SUSE-SU-2018:0990-1 Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP2)
This update for the Linux Kernel 4.4.114-9264 fixes several issues. The following security issues were fixed: - CVE-2017-13166: Prevent elevation of privilege vulnerability in the v4l2 video driver bsc1085447. - CVE-2018-1068: A flaw in the implementation of 32-bit syscall interface for bridging...
SUSE-SU-2018:1021-1 Security update for the Linux Kernel (Live Patch 9 for SLE 12 SP2)
This update for the Linux Kernel 4.4.59-9224 fixes several issues. The following security issues were fixed: - CVE-2017-13166: Prevent elevation of privilege vulnerability in the v4l2 video driver bsc1085447. - CVE-2018-1068: A flaw in the implementation of 32-bit syscall interface for bridging...
CVE-2018-4174
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted messages by leveraging an inconsistency in the user interface...
Mozilla Firefox Denial of Service Vulnerability (CNVD-2018-07046)
Mozilla Firefox, commonly known as "Firefox" in Chinese, is a free and open-source web browser that uses the Gecko typography engine and supports a variety of operating systems, such as Windows, Mac OS X and GNU/Linux, among others. Mozilla Firefox suffers from a denial-of-service vulnerability,...
The vulnerability of the ManageEngine Desktop Central web interface for managing workstations, related to insufficient validation of input data, allows a perpetrator to gain control over the connected workstations.
The vulnerability of the desktop management tool through the web interface of ManageEngine Desktop Central is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain control over all connected desktops...
Cisco Identity Services Engine Guest Portal Cross-Site Scripting Vulnerability
Cisco Identity Services Engine is an access control solution that integrates authentication, authorization and AAA, status, setup files, and client management. A cross-site scripting vulnerability exists in the Cisco Identity Services Engine WEB interface implementation, which allows remote...
CVE-2017-8050
Tenable Appliance 4.4.0, and possibly prior, contains a flaw in the Web UI that allows for the unauthorized manipulation of the admin password...
The vulnerability of the Firefox browser allows a perpetrator to gain access to protected information from the process’ memory.
The vulnerability of the TCP Socket API implementation in Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to protected information from the process’s memory by reading data in network packets due to...
ShopEx某接口缺陷可遍历所有用户网站
简要描述： ShopEx某接口缺陷,可遍历所有网站 详细说明： 问题出现在shopex 网店使用向导页面 http://guide.ecos.shopex.cn/step2.php?refer=eyJjZXJ0aV9pZCI6MTA1MSwiY2FsbGJhY2tfdXJsIjoiaHR0cDpcL1wvd3d3LmVrYWlkaWFuLmNvbVwvIn0= refer base64解密为 "certiid":'1051',"callbackurl":"http://www.joyogame.net/" 我们修改certiid 即可遍历所有使用了ShopEx程序的网站...
Novell NetIQ Privileged User Manager 2.3.1 auth.dll Code Execution
Novell NetIQ Privileged User Manager version 2.3.1 suffers from a remote code execution vulnerability in pamodifyaccounts in auth.dll. The secure web interface contains a flaw which allows, without prior authentication, to change the password of the user 'admin'. A remote attacker then could logi...
CVE-2008-2064
Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface API to connect phpGedView with external programs like content management systems."...
