Barracuda Load Balancer Hard-Coded Weak Credentials Vulnerability

Barracuda Load Balancer is an application delivery controller from Barracuda Networks. The controller provides protection against intrusions and attacks while optimizing application load and providing performance support. A security vulnerability exists in Barracuda Load Balancer version 5.0.0.01...

Barracuda Load Balancer Privilege Access Control Vulnerability

Barracuda Load Balancer is an application delivery controller from Barracuda Networks. The controller provides protection against intrusions and attacks while optimizing application load and providing strong performance support. A power lifting vulnerability exists in Barracuda Load Balancer...

LibRaw 'kodak_radc_load_raw' Function Denial of Service Vulnerability

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A security vulnerability exists in the 'kodakradcloadraw' function in the dcrawcommon.cpp file in LibRaw version 0.18.2. A remote attacker can exploit this vulnerability to cau...

DEBIAN-CVE-2017-13735

There is a floating point exception in the kodakradcloadraw function in dcrawcommon.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack...

PT-2017-13078 · Tsk +1 · The Sleuth Kit +1

Name of the Vulnerable Software and Affected Versions: The Sleuth Kit TSK version 4.4.2 Description: The issue is triggered by opening a crafted disk image, leading to infinite recursion in the dos load ext table function in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls. Recommendations: Fo...

UBUNTU-CVE-2017-13735

There is a floating point exception in the kodakradcloadraw function in dcrawcommon.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack...

Hardcoded credentials

Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015...

CVE-2014-8428

Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key...

Privilege escalation

Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key...

CVE-2014-8426

Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015...

CVE-2014-8428

Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key...

CVE-2014-8426

CVE-2014-8426 affects Barracuda Load Balancer ADC with firmware 5.0.0.015, where hard-coded weak credentials are present. Connected sources describe a hard-coded credential issue and related weaknesses (including SSH key issues and offline password-reset vectors) that could enable unauthorized ac...

CVE-2014-8426

Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015...

CVE-2014-8428

CVE-2014-8428 affects Barracuda Load Balancer 5.0.0.015, causing privilege escalation via an improperly protected SSH key. Multiple sources (NVD entry and CNVD/PRION records) corroborate a vulnerability in Barracuda Load Balancer with this issue, noting the SSH key protection flaw as the root cau...

Installer of "Flets Setsuzoku Tool" may insecurely load Dynamic Link Libraries

Overview Installer of "Flets Setsuzoku Tool"provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC...

BSA-2017-376

Security Advisory ID : BSA-2017-376 Component : Apache HTTPD Revision : 3.0: Final When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behavior...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25062)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial of service vulnerability exists in the 'loadlevel' function of the ImageMagick coders/xcf.c file, which allows remote attackers to exploit the vulnerability to construct malicious...

Fedora 25 : python-tablib (2017-fe04b06b64)

Latest upstream, including the yaml.safeload fix for CVE-2017-2810. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

DEBIAN-CVE-2017-13133

In ImageMagick 7.0.6-8, the loadlevel function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service loadtile memory exhaustion via a crafted file...

HTTP Load Generator: hey

hey is a tiny program that sends some load to a web application – ApacheBench ab replacement. hey was originally called boom and was influenced from Tarek Ziade’s tool at tarekziade/boom . Installation go get -u github.com/rakyll/hey Note: Requires go 1.7 or greater. Usage hey runs provided numbe...