SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure and SoftControl/SafenSoft Enterprise Suite Unauthorized Operation Vulnerabilities

SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite are Russian SAFE'N'SEC's proactive defense-capable malware applications. SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft...

CVE-2018-0518: Improper Certificate Validation

LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Circle with Disney Remote Code Execution Vulnerability (CNVD-2017-33180)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A remote code execution vulnerability exists in the database update feature in Circle with Disney version 2.0.1. The vulnerability can b...

Microsoft Windows SMBv3 Denial of Service Vulnerability

SMB is a network file-sharing protocol that allows applications and end users to access file resources from a remote file server.Microsoft Windows is a popular operating system. A denial of service vulnerability exists in Microsoft Windows SMBv3. An attacker can launch a denial of service attack ...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2016:1568-1)

ntp was updated to version 4.2.8p8 to fix 17 security issues. These security issues were fixed : - CVE-2016-4956: Broadcast interleave bsc982068. - CVE-2016-2518: Crafted addpeer with hmode 7 causes array wraparound with MATCHASSOC bsc977457. - CVE-2016-2519: ctlgetitem return value not always...

openSUSE Security Update : ntp (openSUSE-2016-727)

ntp was updated to fix five security issues. These security issues were fixed : - CVE-2016-4953: Bad authentication demobilizes ephemeral associations bsc982065. - CVE-2016-4954: Processing spoofed server packets bsc982066. - CVE-2016-4955: Autokey association reset bsc982067. - CVE-2016-4956:...

SUSE-SU-2016:1568-1 Security update for ntp

ntp was updated to version 4.2.8p8 to fix 17 security issues. These security issues were fixed: - CVE-2016-4956: Broadcast interleave bsc982068. - CVE-2016-2518: Crafted addpeer with hmode 7 causes array wraparound with MATCHASSOC bsc977457. - CVE-2016-2519: ctlgetitem return value not always...

Siemens COMPAS Mobile Application Input Validation Vulnerability

Siemens COMPAS Mobile application for Android is an Android-based application from Siemens for quickly searching and viewing existing quotations and orders as well as generating reports and drawings. A security vulnerability exists in versions 1.5 and earlier of the Siemens COMPAS Mobile...

CVE-2014-6020: Undefined Security Weakness

The Fuel Rewards Network aka com.excentus.frn application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5663: Undefined Security Weakness

The FreeCell Solitaire aka com.mobilityware.freecell application 2.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Stack overflow

Multiple stack-based buffer overflows in Novell GroupWise Messenger GWIM Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NMASZTRANSACTIONID field name...

CVE-2008-2703

Multiple stack-based buffer overflows in Novell GroupWise Messenger GWIM Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NMASZTRANSACTIONID field name...

CVE-2008-2703: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Novell GroupWise Messenger GWIM Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NMASZTRANSACTIONID field name...

Microsoft Windows 2000 RPC spoofed server attack

Mutual authentication is not actually performed...

CVE-2002-2195: Undefined Security Weakness

Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response...

CVE-2004-2163: Undefined Security Weakness

loginradius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies...

CVE-2005-0158

Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses...

CVE-2003-1118

Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service client crash and execute arbitrary code via a spoofed server response containing a long string followed by a \n newline character...