DEBIAN-CVE-2017-1000364

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over the stack guard page is bypassed, this affects Linux Kernel versions 4.11.5 and earlier the stackguard page was introduced in 2010...

Google Chrome OS Local Information Disclosure Vulnerability

Google Chrome OS is a fast, lightweight, open source Web-based operating system developed by Google. A local information disclosure vulnerability exists in Google Chrome OS versions prior to 59.0.3071.91 and prior to 59.0.3071.92. An attacker can exploit this vulnerability to obtain sensitive...

Google Android Qualcomm TrustZone Security Bypass Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm TrustZone is a system-wide security technology. A security bypass vulnerability exists in Qualcomm TrustZone in versions of Android prior to 7.1.1. It allows a...

ElasticSearch X-Pack Security Information Disclosure Vulnerability

ElasticSearch X-Pack is an extension of the Elastic Stack log analysis system from the Dutch company Elasticsearch. security is one of the features used to control access rights. An information disclosure vulnerability exists in ElasticSearch X-Pack Security versions prior to 5.4.1 and versions...

Cross-Site Scripting Vulnerability in Multiple Peplink Balance Products

Peplink Balance 305 and others are multi-exit load balancing routers for medium-sized businesses. A cross-site scripting vulnerability exists in various Peplink Balance products using firmware versions prior to fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. A remote attacker can exploit...

PT-2017-18649

Name of the Vulnerable Software and Affected Versions strongSwan versions prior to 5.5.3 Description The issue is related to the improper validation of RSA public keys in the gmp plugin, which can lead to a denial of service. This occurs when remote peers send crafted certificates, causing a...

Password Reset

I changed my password on my Linux system and now I can't push/pull via Atlassian SourceTree 2.0.20.1 gui. I tried resetting via the authentication tab under Tools-Options but the password is not being saved. I can use git via command line via Terminal because I am prompted for a password. I...

Google Android MediaTek command queue driver information disclosure vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.MediaTek command queue driver is one of MediaTek's command queue drivers. An information disclosure vulnerability exists in the MediaTek command queue driver in versions of Android...

PT-2017-2222 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.11.1 Description: The issue is related to the dccp v6 request recv sock function in the net/dccp/ipv6.c file of the Linux kernel, which mishandles inheritance. This allows local users to cause a denial of...

Mozilla Firefox Content Forgery Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 53. An attacker could exploit the vulnerability to forge content...

CVE-2017-3070

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class. Successful exploitation could lead to arbitrary code execution...

Accellion FTA Device Cross-Site Scripting Vulnerability (CNVD-2017-07451)

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. A cross-site scripting vulnerability exists in home/seos/courier/useradd.html in Accellion FTA devices versions prior to FTA912180. ...

Accellion FTA Device CRLF Vulnerability

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. A CRLF vulnerability exists in versions of Accellion FTA devices prior to FTA912180. A remote attacker could exploit this...

Accellion FTA Device Cross-Site Scripting Vulnerability

Accellion File Transfer is a web-based file transfer/synchronization system. A cross-site scripting vulnerability exists in the Accellion FTA appliance FTA912180 and prior versions. 允许远程攻击者可以通过courier/1000@/index.html中的authparams参数注入任意的web脚本或HTML...

PT-2017-3739 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.12 Description: The issue is related to the implementation of the Kerberos 5 protocol in the Linux kernel, specifically with the handling of RXRPC keys. It could lead to a buffer overflow when decoding Kerbero...

UBUNTU-CVE-2017-3561

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

PT-2017-8408

Name of the Vulnerable Software and Affected Versions Kallithea versions prior to 0.3.2 Description The issue allows remote attackers to bypass CSRF protection by utilizing the GET HTTP request method. Recommendations For versions prior to 0.3.2, update to version 0.3.2 or later to resolve the...

WatchGuard Fireware Denial of Service Vulnerability

WatchGuard Fireware is a firewall appliance from WatchGuard USA that provides intrusion protection, spam filtering, SSL VPN and more with intelligent layering technology. A denial of service vulnerability exists in WatchGuard Fireware v11.12.1 and prior versions. An attacker can exploit this...

web2py security bypass vulnerability

web2py is a set of open source Web framework written in Python , it supports the rapid development of database-driven Web-based applications . A security bypass vulnerability exists in web2py versions prior to 2.14.6. A remote attacker can exploit this vulnerability to conduct a brute force attac...

ILIAS Cross-Site Scripting Vulnerability (CNVD-2017-05243)

ILIAS is a Web-based learning management system developed by the ILIAS team. The system contains modules for course management, file sharing, and live chat. A cross-site scripting vulnerability exists in ILIAS versions prior to 5.2.3. A remote attacker can exploit this vulnerability to inject...