Lucene search
K

8825 matches found

BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.5 views

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

Cisco IOS software contains a vulnerability in the Multicast Source Discovery Protocol MSDP, which allows a remote attacker to trigger a “disconnect” condition on a router by sending specially crafted MSDP packets...

7.1CVSS7.3AI score0.03849EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.5 views

Vulnerability of the Java Runtime Environment software platform, which allows a malicious attacker to compromise data confidentiality and integrity

Vulnerability of the Java Runtime Environment, related to program components. Exploiting this vulnerability allows an unauthorized attacker to compromise the confidentiality, integrity, and accessibility of data by using the Networking component...

5CVSS6.2AI score0.03807EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.6 views

The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.

The vulnerability of the Java Development Kit, related to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data, by using the subcomponent Networking...

5CVSS6.2AI score0.03807EPSS
Exploits0References7
OSV
OSV
added 2016/06/25 12:0 a.m.44 views

DLA-527-1 nss - security update

Bulletin has no description...

9.3CVSS8.7AI score0.0338EPSS
Exploits0
CVE
CVE
added 2016/06/24 5:0 p.m.47 views

CVE-2016-5435

The CVE-2016-5435 issue affects Huawei security appliances (e.g., IPS Module, NGFW Module, NIP6300/6600, Secospace USG6300/6500/6600/9500 and AntiDDoS8000) in hot standby setups where two devices are not directly connected. The root cause is a memory leak triggered by crafted packets, leading to ...

7.1CVSS5.7AI score0.00962EPSS
Exploits0References1Affected Software1
Mageia
Mageia
added 2016/06/22 7:8 p.m.78 views

Updated kernel-tmb packages fix security vulnerabilities

This kernel-tmb update provides an upgrade to the upstream 4.4 longterm kernel series, currently based on 4.4.13 and resolves at least the following security issues: The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service memory consumption ...

10CVSS7.7AI score0.06438EPSS
Exploits16References17
Tenable Nessus
Tenable Nessus
added 2016/06/17 12:0 a.m.43 views

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20160510)

Security Fixes : - It was found that reporting emulation failures to user space could lead to either a local CVE-2014-7842 or a L2-L1 CVE-2010-5313 denial of service. In the case of a local denial of service, an attacker must have access to the MMIO area or be able to access an I/O port. Please...

7CVSS6.4AI score0.03693EPSS
Exploits1References10
Tenable Nessus
Tenable Nessus
added 2016/06/15 12:0 a.m.54 views

RHEL 6 : kernel (RHSA-2016:1225)

An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.8CVSS6.8AI score0.06267EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2016/06/14 11:27 a.m.5 views

kernel: net: incorrect processing of checksums in UDP implementation

A flaw was found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of service in...

5CVSS6.8AI score0.06245EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2016/06/14 11:27 a.m.54 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.8CVSS6.6AI score0.06267EPSS
Exploits0References2
Mageia
Mageia
added 2016/06/13 3:55 p.m.79 views

Updated kernel packages fix security vulnerabilities

This kernel update provides an upgrade to the upstream 4.4 longterm kernel series, currently based on 4.4.13 and resolves at least the following security issues: The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service memory consumption by...

10CVSS7.9AI score0.06438EPSS
Exploits16References17
OSV
OSV
added 2016/06/08 5:59 p.m.6 views

CVE-2016-3708

Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from pods in other namespaces, allows remote authenticated users to access network resources on restricted pods via an s2i build with a builder image that 1 contain...

7.1CVSS5.8AI score0.01108EPSS
Exploits0References1
Fedora
Fedora
added 2016/06/08 1:26 a.m.42 views

[SECURITY] Fedora 23 Update: openslp-2.0.0-8.fc23

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

7.5CVSS2.7AI score0.05259EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2016/06/08 12:0 a.m.25 views

FreeBSD : NSS -- multiple vulnerabilities (32166082-53fa-41fa-b081-207e7a989a0a)

Mozilla Foundation reports : Mozilla has updated the version of Network Security Services NSS library used in Firefox to NSS 3.23. This addresses four moderate rated networking security issues reported by Mozilla engineers Tyson Smith and Jed Davis. %NASLMINLEVEL 70300 C Tenable Network Security,...

9.3CVSS8.2AI score0.0338EPSS
Exploits0References7
Mozilla
Mozilla
added 2016/06/07 12:0 a.m.57 views

Network Security Services (NSS) vulnerabilities — Mozilla

Mozilla has updated the version of Network Security Services NSS library used in Firefox to NSS 3.23. This addresses four moderate rated networking security issues reported by Mozilla engineers Tyson Smith and Jed Davis...

9.3CVSS3.3AI score0.0338EPSS
Exploits0References3Affected Software2
FreeBSD
FreeBSD
added 2016/06/07 12:0 a.m.31 views

NSS -- multiple vulnerabilities

Mozilla Foundation reports: Mozilla has updated the version of Network Security Services NSS library used in Firefox to NSS 3.23. This addresses four moderate rated networking security issues reported by Mozilla engineers Tyson Smith and Jed Davis...

9.3CVSS2.8AI score0.0338EPSS
Exploits0References5
The Hacker News
The Hacker News
added 2016/06/05 10:11 p.m.79 views

VK.com HACKED! 100 Million Clear Text Passwords Leaked Online

Another day, another Data Breach! Now, Russia's biggest social networking site VK.com is the latest in the line of historical data breaches targeting social networking websites. The same hacker who previously sold data dumps from MySpace, Tumblr, LinkedIn, and Fling.com, is now selling more than...

6.7AI score
Exploits0
Cloud Foundry
Cloud Foundry
added 2016/06/03 12:0 a.m.77 views

USN-2970-1 Linux kernel (Vivid HWE) vulnerabilities | Cloud Foundry

USN-2970-1 Linux kernel Vivid HWE vulnerabilities Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 LTS Description Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not properly sanity check the endpoints reported by the device. An...

7.8CVSS7.9AI score0.01946EPSS
Exploits19
ThreatPost
ThreatPost
added 2016/06/01 3:30 p.m.13 views

Moxa Discontinuing Vulnerable Line of ICS Devices

A vulnerability that exists in embedded computers manufactured by Moxa could allow remote authenticated users to overwrite firmware, in turn rendering the devices unusable. Moxa, a Taiwan-based networking company, announced recently that instead of patching the line of products affected by the...

0.2AI score
Exploits0References7
Fedora
Fedora
added 2016/05/31 8:15 a.m.27 views

[SECURITY] Fedora 24 Update: openslp-2.0.0-9.fc24

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

7.5CVSS2.7AI score0.05259EPSS
Exploits1
Rows per page
Query Builder