998 matches found
CVE-2017-11519
TP-Link Archer C9(UN)_V2_160517 is affected by CVE-2017-11519 due to a predictable RNG seed in passwd_recovery.lua, enabling an attacker to reset the admin password over the network. The issue is fixed in firmware C9(UN)_V2_170511. If exploited, impact is administrator password reset; CVSS metric...
RHEL 7 : qemu-kvm-rhev (RHSA-2017:1431)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1431 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the...
Important: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update
An update for qemu-kvm-rhev is now available for RHEV 3.X Hypervisor and Agents for RHEL-7 and RHEV 4.X RHEV-H and Agents for RHEL-7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
Updated libxslt packages fix security vulnerability
The libxslt library failed to seed its random number generator, resulting in predictable random values CVE-2015-9019...
MGASA-2017-0169 Updated libxslt packages fix security vulnerability
The libxslt library failed to seed its random number generator, resulting in predictable random values CVE-2015-9019...
EulerOS 2.0 SP1 : libgcrypt (EulerOS-SA-2016-1081)
According to the version of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A design flaw was found in the libgcrypt PRNG Pseudo-Random Number Generator. An attacker able to obtain the first 580 bytes of the PRNG output...
USN-3260-1 firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to read uninitialized memory, obtain sensitive information, spoof the addressbar contents or other UI elements, escape the sandbox to...
Huawei WS318 Design Vulnerability
Huawei WS318 is a wireless router product from Huawei China. A security vulnerability exists in Huawei WS318 V100R001C01B022 and prior versions, which stems from insufficient randomness in the random number generator RNG in the vendor solution used by the product. The vulnerability can be exploit...
CVE-2014-9690
Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerability of the WPS protocol because the random number generator RNG used in the supplier's solution is not random enough. As a result, brute force cracking the...
CVE-2014-9690
CVE-2014-9690 affects Huawei WS318 home gateways (software versions including V100R001C01B022 and earlier). The underlying issue is an insufficiently random RNG used by the vendor’s WPS implementation, enabling offline PIN brute-forcing. Exploitation allows an attacker to crack the WPS PIN and ga...
Adobe Flash Player Within Google Chrome Security Update (APSB17-07) - Linux
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayerchrome"...
Microsoft IE And Microsoft Edge Multiple Flash Player Vulnerabilities (4014329)
This host is missing a critical security update according to Microsoft Bulletin MS17-023. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD : Flash Player -- multiple vulnerabilities (4ffb633c-0a3b-11e7-a9f2-0011d823eebd)
Adobe reports : - These updates resolve a buffer overflow vulnerability that could lead to code execution CVE-2017-2997. - These updates resolve memory corruption vulnerabilities that could lead to code execution CVE-2017-2998, CVE-2017-2999. - These updates resolve a random number generator...
SUSE SLED12 Security Update : flash-player (SUSE-SU-2017:0703-1)
This update for flash-player fixes the following issues: Security update to 25.0.0.127 bsc1029374, fixing the following vulnerabilities advised under APSB17-07 : - CVE-2017-2997: This update resolves a buffer overflow vulnerability that could lead to code execution. - CVE-2017-2998, CVE-2017-2999...
flash-plugin: multiple code execution issues fixed in APSB17-07
Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure...
Adobe Flash Player Security Updates (APSB17-07) - Mac OS X
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
[ASA-201703-12] lib32-flashplugin: multiple issues
Arch Linux Security Advisory ASA-201703-12 ========================================== Severity: Critical Date : 2017-03-15 CVE-ID : CVE-2017-2997 CVE-2017-2998 CVE-2017-2999 CVE-2017-3000 CVE-2017-3001 CVE-2017-3002 CVE-2017-3003 Package : lib32-flashplugin Type : multiple issues Remote : Yes Lin...
CVE-2017-3000
Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure...
