3024 matches found
CIMCO DNC-Max Server denial of service vulnerability
No description provided by source...
SQL Injection Vulnerability in CIMCO DSS-MAX Decision Support System
CIMCO is the world's largest installed base of DNC systems, mainly used for networking communication of CNC machine tools, machine monitoring, etc. CIMCO DSS-Max Server is a DNC/MDC decision support service software, through which you can easily manage the DNC/MDC database. SQL injection...
UBUNTU-CVE-2016-2450
codecs/on2/enc/SoftVPXEncoder.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate OMX buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining...
CIMCO DNC-Max Server Denial of Service Vulnerability
CIMCO is the world's largest installed base of DNC systems, which are mainly used for networking communication of CNC machine tools, machine monitoring, etc. CIMCO DNC-Max Server is the DNC server software, which is integrated with the FTP Server function, and is used for CNC machine tools to...
Caching best practices & max-age gotchas
Getting caching right yields huge performance benefits, saves bandwidth, and reduces server costs, but many sites half-arse their caching, creating race conditions resulting in interdependent resources getting out of sync. The vast majority of best-practice caching falls into one of two patterns:...
Drift Max - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Drift Max published at the 'play' market has multiple vulnerabilities...
Drift Max City - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Drift Max City published at the 'play' market has multiple vulnerabilities...
Max Steel - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Max Steel published at the 'play' market has multiple vulnerabilities...
Max Remote - Computer - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Max Remote - Computer published at the 'play' market has multiple vulnerabilities...
Photo Editor MAX - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Photo Editor MAX published at the 'play' market has multiple vulnerabilities...
MAX! eQ-3 - Customized SSL, Unsafe deleting, WebView files access vulnerabilities
HackApp vulnerability scanner discovered that application MAX! eQ-3 published at the 'play' market has multiple vulnerabilities...
Max Watchface free - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application Max Watchface free published at the 'play' market has multiple vulnerabilities...
openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
It was discovered that the OpenSSH sshd daemon did not check the list of keyboard-interactive authentication methods for duplicates. A remote attacker could use this flaw to bypass the MaxAuthTries limit, making it easier to perform password guessing attacks...
March 8, 2016, update for Access 2016 (KB3114850)
None None...
KMC Controls Conquest BACnet Router Vulnerabilities
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on May 5, 2016, and is being released to the NCCIC/ICS-CERT web site. Independent researcher Maxim Rupp has identified authentication and cross-site request forgery CSRF vulnerabilities in KMC Controls’ Conquest...
One after another: the VTech user data leaked, and was broke two major vulnerability-vulnerability warning-the black bar safety net
Recently, the world's largest infant electronic learning product Maker Vtech(Vtech)is aeration 4 8 0 million parents and 6 4 0 million for children information disclosure. ! Due to this event, Vtech its share price fell to a year low. Followed, with security researchers in their innotab Max produ...
OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...
OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...
OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...
OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...