Per app VPN for android - Cannot connect to internal resources.

After setting up per app VPN for android, the customer is unable to connect to internal resources. Google chrome launches but page comes up in a blank white screen .. VPN connections shows as not sending or receiving packets...

CVE-2017-14223

In libavformat/asfdecf.c in FFmpeg 3.3.3, a DoS in asfbuildsimpleindex due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would...

CVE-2017-14223

In libavformat/asfdecf.c in FFmpeg 3.3.3, a DoS in asfbuildsimpleindex due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would...

Ringtone Duo App Has Denial of Service Vulnerability

Ringtone Duo APP is a cell phone ringtone downloader. Ringtone Duo APP suffers from a denial-of-service vulnerability, where an attacker consumes server resources and causes a denial-of-service by sending unlimited CAPTCHAs to cell phones...

CVE-2017-14171

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...

CVE-2017-14172

In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted PSD file, which claims a large "extent" field in the header but does not contain sufficient backing data, is provided, the loop over "length"...

Denial of Service Vulnerability in EZZY APP for Android

EZZY APP is a car intelligent sharing platform APP created by Beijing Daimeng Technology Co. A denial of service vulnerability exists in the Android version of EZZY APP, which allows an attacker to traverse a cell phone number and consume server resources by sending an unlimited number of...

CVE-2017-1458

IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128377...

CVE-2017-1458

CVE-2017-1458 affects IBM QRadar Network Security 5.4. The issue is an XML External Entity (XXE) vulnerability in XML data processing, potentially exposing sensitive information or causing memory/resource depletion. The IBM bulletin states a fixed version: firmware 5.4.0.2. Remediation options in...

CVE-2017-12713

An Incorrect Permission Assignment for Critical Resource issue was discovered in Advantech WebAccess versions prior to V8.220170817. Multiple files and folders with ACLs that affect other users are allowed to be modified by non-administrator accounts...

CVE-2017-13775

GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests...

CVE-2017-13775

GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests...

Yiwu Shopping App has Denial of Service Vulnerability

Yiwubuy APP is a B2B small commodities wholesale and retail procurement platform. Yiwu Shopping APP has a denial-of-service vulnerability that allows attackers to traverse cell phone numbers and consume server resources by sending unlimited verification codes to cell phones, resulting in a denial...

FAQ: NetScaler SD-WAN Center and Hardware Requirements

Question: Is It Possible to Increase the Cores and RAM of an Existing SD-WAN Center VM? Answer: Yes it is possible to increase the cores and RAM of an existing SD-WAN Center VM. If the hypervisor has sufficient resources shutdown the SD-WAN Center instance and increase the Cores and RAM to the...

Atlassian OAuth Server-Side Request Forgery Vulnerability

Atlassian OAuth Plugin is an authorization plugin from Atlassian Australia for accessing personal Atlassian software data. A security vulnerability exists in the IconUriServlet in the Atlassian OAuth Plugin. A remote attacker could exploit the vulnerability to access internal network resources or...

CVE-2017-9506

The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SSRF...

Server side request forgery (ssrf)

The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SSRF...

Oriental Resources Self-service Website - SQL Injection Vulnerability in Enterprise Website Management System

Enterprise Website Management System is an enterprise website based on PHP+MYSQL. An SQL injection vulnerability exists in Oriental Resources Self-service Website Builder - Enterprise Website Management System. The vulnerability is due to the system pkey parameter does not filter the data submitt...

The vulnerability of the Solaris component (a kernel subsystem of the operating system) allows a attacker to gain access to all resources of the operating system.

The vulnerability of the Solaris component a kernel subsystem of the operating system is related to access control deficiencies. Exploiting this vulnerability could allow a person with high privileges, operating locally, to gain access to all resources of the operating system...

The vulnerability of the ReadPDBImage function (coders/pdb.c) in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.

The vulnerability of the ReadPDBImage function coders/pdb.c in the console-based image editing tool ImageMagick is due to the exhaustion of processor resources. Exploiting this vulnerability may allow a malicious actor to cause service interruptions remotely...