CVE-2018-17908

WebAccess Versions 8.3.2 and prior. During installation, the application installer disables user access control and does not re-enable it after the installation is complete. This could allow an attacker to run elevated arbitrary code...

re-unite.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-692002 Description| Value ---|--- Affected Website:| re-unite.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

CVE-2018-17935

All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state...

[SECURITY] Fedora 28 Update: libgit2-0.26.7-1.fc28

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

[SECURITY] Fedora 27 Update: libgit2-0.26.7-1.fc27

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

Ektron Content Management System (CMS) Remote Re-enablement User Vulnerability

Ektron Content Management System is an enterprise-level Web content management system from Ektron, Inc. A remote re-enablement user vulnerability exists in Ektron Content Management System CMS version 9.20 SP2, which allows remote attackers to exploit the vulnerability to enable users...

pro-re-publica.de XSS vulnerability

Open Bug Bounty ID: OBB-681857 Description| Value ---|--- Affected Website:| pro-re-publica.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Re-IP rules do not work in Veeam Availability Orchestrator lab test

Challenge In rare cases, when you perform a failover, Re-IP rules are applying correctly, however, when you perform a lab test these rules would not be applied. Solution To resolve that: 1. Make sure that no plans are currently running 2. Open Veeam Availability Orchestrator UI Configuration VAO...

CVE-2018-5391: Uncontrolled Resource Consumption

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation...

[SECURITY] Fedora 27 Update: libgit2-0.26.6-1.fc27

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2018-4195)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4195 advisory. - ipv4: frags: handle possible skb truesize change Eric Dumazet Orabug: 28481663 CVE-2018-5391 - inet: frag: enforce memory limits earlier Eric Dumazet...

Insecure Defaults

libcurl.so is vulnerable to insecure defaults. The library re-uses connections rather than create new connections, allowing a malicious user to connect to other users by sending requests through a re-used connection, leading to an authentication bypass in certain connections that require...

[SECURITY] Fedora 28 Update: libgit2-0.26.6-1.fc28

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

Qualys Cloud Platform 2.34 New Features

This release of the Qualys Cloud Platform version 2.34 includes updates and new features for Cloud Agent, EC2 Connector, Continuous Monitoring, Security Assessment Questionnaire, Web Application Scanning, and Web Application Firewall, highlights as follows. Cloud Agent Automatic Merge of Cloud...

[SECURITY] Fedora 28 Update: libgit2-0.26.5-1.fc28

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

re-guest.com XSS vulnerability

Open Bug Bounty ID: OBB-646914 Description| Value ---|--- Affected Website:| re-guest.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

x5.re XSS vulnerability

Open Bug Bounty ID: OBB-644270 Description| Value ---|--- Affected Website:| x5.re Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] Fedora 28 Update: libgit2-0.26.4-1.fc28

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

[SECURITY] Fedora 27 Update: libgit2-0.26.4-1.fc27

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

Intel® Processor Diagnostic Tool Privilege Escalation Vulnerability

Summary: Privilege escalation Description: Permissions issue with IPDT Installer v4.1.0.24 installs 3 files within improper permissions, allowing for arbitrary code execution and escalation of privileges CVSS Score 8.3 - High: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H Affected products: IPDT –...