167 matches found
CVE-2011-3079
The Inter-process Communication IPC implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors...
Input validation
message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange AX information is signed, which allows remote attackers to modify...
Ubuntu Update for krb5 vulnerability USN-999-1
Ubuntu Update for Linux kernel vulnerabilities USN-999-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9991.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for krb5 vulnerability USN-999-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
wengophone-dos.txt
Title ===== WengoPhone SIP phone Remote Denial of Service vulnerability Date ==== 10 August 2007 Affected Software ================= WengoPhone versions 2.x tested on 2.1 Overview ======== WengoPhone is a thriving VoIP Service Provider from France. It is a free and wild used SIP based softphone...
counterpath-dos.txt
Title ===== CounterPath X-Lite SIP phone Remote Denial of Service vulnerability Date ==== 10 August 2007 Affected Software ================= X-Lite versions 3.x tested on 3.0 34025 Maybe eyeBeam also ; Overview ======== X-Lite by CounterPath Solutions, Inc. is a free and wild used SIP based...
PT-2005-3110 · Cisco · Cisco 7940/7960
Name of the Vulnerable Software and Affected Versions: Cisco 7940/7960 Voice over IP VoIP phones affected versions not specified Description: The issue concerns the improper validation of certain values in a NOTIFY message, which can be exploited by remote attackers to spoof messages. This could...
