Microsoft Windows Hyper-V CVE-2018-0888 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for 32-bit Systems Microsof...

foreman: models with a 'belongs_to' association to an Organization do not verify association belongs to that Organization

It was found that foreman in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations...

CVE-2016-6813

Apache CloudStack 4.1 to 4.8.1.0 and 4.9.0.0 contain an API call designed to allow a user to register for the developer API. If a malicious user is able to determine the ID of another non-"root" CloudStack user, the malicious user may be able to reset the API keys for the other user, in turn...

CVE-2016-6813: Undefined Security Weakness

Apache CloudStack 4.1 to 4.8.1.0 and 4.9.0.0 contain an API call designed to allow a user to register for the developer API. If a malicious user is able to determine the ID of another non-"root" CloudStack user, the malicious user may be able to reset the API keys for the other user, in turn...

Input validation

An Improper Input Validation issue was discovered in Nari PCS-9611 relay. An improper input validation vulnerability has been identified that affects a service within the software that may allow a remote attacker to arbitrarily read/access system resources and affect the availability of the syste...

CVE-2018-6029

The copy function in application/admin/controller/Article.php in NoneCms 1.3.0 allows remote attackers to access the content of internal and external network resources via Server Side Request Forgery SSRF, because URL validation only considers whether the URL contains the "csdn" substring...

PT-2018-5683

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager Appliance versions 8.0.0 through 9.0.0 Description: The issue allows a security-critical resource to be read or modified by unintended actors due to improper permission specification. Recommendations: For versions...

CVE-2017-0301: Undefined Security Weakness

In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the application...

LAVA Computer MFG Ether-Serial Link Authentication Bypass Vulnerability

Ether-Serial Link is an Ethernet serial link device from LAVA Computer MFG. An authentication bypass vulnerability exists in LAVA Computer MFG Ether-Serial Link versions 6.01.00/29.03.2007 and earlier, which can be exploited by an attacker with the same IP address to bypass authentication by...

PT-2017-12334

Name of the Vulnerable Software and Affected Versions OPC Foundation UA .NET Sample Code versions prior to 2017-03-21 Local Discovery Server LDS versions prior to 1.03.367 Siemens SIMATIC PCS7 versions 8.1 and earlier Siemens SIMATIC WinCC versions prior to 7.4 SP1 Siemens SIMATIC WinCC Runtime...

CVE-2016-6797

The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was...

Vulnerability in the Android operating system’s loader, allowing a hacker to gain access to resources

The vulnerability in the Android operating system’s loader is related to incorrect initialization of resources. Exploiting this vulnerability can allow a remote attacker to gain access to these resources...

The vulnerability of the TrustZone component of the Android operating system allows a hacker to gain access to resources.

The vulnerability of the TrustZone component in the Android operating system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain access to resources...

PT-2017-8894

Name of the Vulnerable Software and Affected Versions IBM Tivoli Key Lifecycle Manager versions 2.0.1, 2.5, 2.6 Description The issue allows a security-critical resource to be read or modified by unintended actors due to improper permission specifications. Recommendations For IBM Tivoli Key...

PT-2017-2200

Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to an improper authorization vulnerability in the TrustZone component of the Android operating system. This vulnerability could potentially allow a remote attack...

PT-2017-2203

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A Use of Uninitialized Variable issue could potentially exist in the Boot component of Android, related to incorrect initialization of a resource. This could allow a remote attacker to access...

PT-2017-2213

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to an improper authorization vulnerability in the Core Kernel of the Android operating system. This could potentially allow a remote attacker to gain access to a...

NetScaler is forcing the SSL connection on sites browsed with Secure Web

Web Links for HTTP resources attempting to connect via Secure Web over HTTPs and failing as resource does not exist on HTTPs...

Schneider Electric Wonderware InTouch Access Anywhere Privilege Gain Vulnerability

Schneider Electric Wonderware InTouch is an open, scalable HMI and SCADA monitoring solution from Schneider Electric, France, that creates standardized, reusable visualization applications.Wonderware InTouch Access Anywhere is a product that provides access to InTouch applications through a web...

Ubuntu: Security Advisory (USN-3177-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...