3088 matches found
NUUO and Netgear Network Video Recorder (NVR) products web interfaces contain multiple vulnerabilities
Overview NUUO NVRmini 2, NVRsolo, Crystal, and Netgear ReadyNAS Surveillance products have web management interfaces containing multiple vulnerabilities that can be leveraged to gain complete control of affected devices. Description NUUO NVRmini 2, NVRsolo, and Crystal, and Netgear ReadyNAS...
The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, allow attackers to circumvent restrictions on the execution of JavaScript APIs.
The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow a malicious actor to...
[SECURITY] Fedora 23 Update: php-guzzlehttp-guzzle6-6.2.1-1.fc23
Guzzle is a PHP HTTP client that makes it easy to send HTTP requests and tr ivial to integrate with web services. Simple interface for building query strings, POST requests, streaming lar ge uploads, streaming large downloads, using HTTP cookies, uploading JSON da ta, etc... Can send both...
Unauthorized Access Vulnerability in Sandbox Profiles Component of Multiple Apple Products
Apple iOS, OS X, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. Sandbox Profiles is one of...
Android Framework APIs elevation of privilege vulnerability (CNVD-2016-04682)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Framework APIs are one of the API components used to create the framework. A power lifting vulnerability exists in Android's Framework APIs. A local attacker can exploit this...
Citrix ADC Networking and VLAN Best Practices
The ADC uses VLANs to determine which interface should be used for which traffic. In addition, ADC does not participate in Spanning Tree. Without the proper VLAN configuration, the ADC is unable to determine which interface to use and it can function more like a HUB than a switch or router in the...
Cisco AMP Threat Grid Unauthorized Access Vulnerability
Cisco AMP Threat Grid is the United States Cisco Cisco company's set of integrated static and dynamic malware analysis and threat intelligence in one solution. The program can help enterprises to analyze the behavior and intent of malware, the impact of the threat level and defense methods. An...
Cisco AMP Threat Grid Unauthorized Clean IP Access Vulnerability
A vulnerability in the virtual network stack of the Cisco AMP Threat Grid Appliance could allow an unauthenticated, remote attacker to access internal interfaces within the appliance. The vulnerability is due to insufficient isolation between the sandbox and other internal components. An attacker...
The vulnerability of Cisco Nexus 7000 software allows a malicious individual to increase their privileges.
The vulnerability in Cisco NX-OS devices of the Nexus 7000 series – where multiple virtual device contexts VDC are enabled, along with local authentication – allows remote users who have passed authentication to elevate their privileges within an unplanned VDC environment, by using SSH sessions a...
The vulnerability of the NameSurfer IP address management server allows a malicious actor to gain unauthorized access to confidential information of the target system.
The vulnerability of the Nixu NameSurfer software lies in errors that occur when working with SOAP interfaces. Exploiting this vulnerability allows a malicious individual to gain access to confidential information of the target system...
CVE-2016-1398
Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service device reload via a crafted HT...
Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-3018-2)
USN-3018-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not...
Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-3019-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3019-1 advisory. Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility...
Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3018-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3018-1 advisory. Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility...
SA127 : PacketShaper S-Series Insecure Cryptographic Parameters
SUMMARY The HTTPS web UI in PacketShaper S-Series 11.5 may use insecure cryptographic parameters for incoming management connections. A remote attacker who can be a man-in-the-middle, under certain circumstances, may be able to exploit this vulnerability to obtain user authentication credentials...
Updated libimobiledevice packages fix CVE-2016-5104
Updated libimobiledevice and usbmuxd package fixes security vulnerability: The libimobiledevice and libusbmuxd libraries open a socket that listens on all available network interfaces, rather than just the loopback interface as was intended CVE-2016-5104...
USN-3007-1: Linux kernel (Raspberry Pi 2) vulnerabilities
Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. CVE-2016-2117 Jann Horn discovered that eCryptfs improperly attempted to use...
USN-3006-1: Linux kernel vulnerabilities
Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. CVE-2016-2117 Jann Horn discovered that eCryptfs improperly attempted to use...
USN-3005-1: Linux kernel (Xenial HWE) vulnerabilities
Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. CVE-2016-2117 Jann Horn discovered that eCryptfs improperly attempted to use...
USN-3003-1: Linux kernel vulnerabilities
Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. CVE-2016-2117 Jann Horn discovered that eCryptfs improperly attempted to use...