Cisco ASA Software DHCP Relay Denial of Service Vulnerability (cisco-sa-20161005-asa-dhcp)

A vulnerability in the DHCP Relay feature of Cisco ASA Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition by causing an interface wedge. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources,...

Cisco ASA Software DHCP Relay Denial of Service Vulnerability

A vulnerability in the DHCP Relay feature of Cisco ASA Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition by causing an interface wedge. The vulnerability is due to improper handling of resources linked with the DHCP Relay feature. An attacker...

Cisco NX-OS Software Malformed DHCPv4 Packet Denial of Service Vulnerability

A vulnerability in the implementation of the DHCPv4 relay agent in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of malformed DHCPv4 packets. An attacker could...

Cisco NX-OS Software Crafted DHCPv4 Packet Denial of Service Vulnerability

A vulnerability in the implementation of the DHCPv4 relay agent and smart relay agent in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of crafted DHCPv4 offer...

PT-2016-6898 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.4.7.29 through 9.1.7.4 Description: A denial of service issue exists due to the improper handling of DHCP packets by the DHCP Relay feature. This can be exploited by an unauthenticated...

Google Chrome < 53.0.2785.89 Multiple Vulnerabilities

Binary data 9594.pasl...

Apple iOS and OS X IDS - Connectivity Component Man-in-the-Middle Attack Vulnerability

Apple iOS and OS X are both operating systems from Apple Inc. Apple iOS is developed for mobile devices; Apple OS X is developed for Mac computers.IDS - Connectivity is one of the components used to connect to IDS. A man-in-the-middle attack vulnerability exists in the IDS - Connectivity componen...

Irssi 'buf.pl' Local Information Disclosure Vulnerability

Irssi is a text-based IRC client program written in C by Timo Sirainen and released under the GPL GNU General Public License. A local information disclosure vulnerability exists in Irssi, which can be exploited by a local attacker to obtain sensitive information...

CVE-2016-4722

The IDS - Connectivity component in Apple iOS before 10 and OS X before 10.12 allows man-in-the-middle attackers to conduct Call Relay spoofing attacks and cause a denial of service via unspecified vectors...

CVE-2016-4722

The IDS - Connectivity component in Apple iOS before 10 and OS X before 10.12 allows man-in-the-middle attackers to conduct Call Relay spoofing attacks and cause a denial of service via unspecified vectors...

CVE-2016-4722

CVE-2016-4722 affects Apple iOS prior to 10 and macOS (OS X) prior to 10.12 in the IDS - Connectivity component. The issue is a spoofing vulnerability in Call Relay handling that could enable a man-in-the-middle position to cause a denial of service. Apple’s security content notes this as a spoof...

openSUSE Security Update : Chromium (openSUSE-2016-1080)

Chromium was updated to 53.0.2785.101 to fix a number of security issues and bugs. The following vulnerabilities were fixed: boo996648 - CVE-2016-5147: Universal XSS in Blink. - CVE-2016-5148: Universal XSS in Blink. - CVE-2016-5149: Script injection in extensions. - CVE-2016-5150: Use after free...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:2296-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

chromium-browser: smb relay attack via save page as

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and condu...

CVE-2016-5166

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and condu...

Information disclosure

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and condu...

UBUNTU-CVE-2016-5166

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and condu...

CVE-2016-5166

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and condu...

CVE-2016-5166

Removed by vendor...

CVE-2016-5166

CVE-2016-5166 affects Google Chrome/Chromium where the download implementation does not properly restrict saving a file:// URL that is referenced by an http:// URL. This enables user‑assisted disclosure of NetNTLM hashes and SMB relay attacks via a crafted page loaded with the Save page as option...