Lucene search
K

3891 matches found

Citrix
Citrix
added 2016/07/05 12:0 a.m.5 views

Error: "Could Not Create Exchange Provisioning Profile" When Launching Secure Mail in iOS

Users are getting an error "Could Not Create Exchange Provisioning Profile" when they have not logged into Secure Mail for a few hours. Users can click OK and email will sync fine...

7.1AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.3 views

The vulnerability of the VFR function in the Cisco IOS operating system, caused by synchronization errors when using a shared resource, allows a violator to trigger a service failure.

The vulnerability of the VFR function in the Cisco IOS operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS5.5AI score0.0033EPSS
Exploits0References4Affected Software1
Fedora
Fedora
added 2016/07/02 7:36 p.m.60 views

[SECURITY] Fedora 23 Update: ntp-4.2.6p5-41.fc23

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

7.5CVSS1.3AI score0.30064EPSS
Exploits3
Fedora
Fedora
added 2016/07/02 7:29 p.m.40 views

[SECURITY] Fedora 22 Update: ntp-4.2.6p5-41.fc22

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

7.5CVSS1.3AI score0.30064EPSS
Exploits3
Tenable Nessus
Tenable Nessus
added 2016/06/14 12:0 a.m.260 views

openSUSE Security Update : MozillaFirefox / mozilla-nss (openSUSE-2016-704)

This update to Mozilla Firefox 47 fixes the following issues boo983549 : Security fixes : - CVE-2016-2815/CVE-2016-2818: Miscellaneous memory safety hazards boo983638 MFSA 2016-49 - CVE-2016-2819: Buffer overflow parsing HTML5 fragments boo983655 MFSA 2016-50 - CVE-2016-2821: Use-after-free...

9.3CVSS7.3AI score0.64664EPSS
Exploits7References28
Tenable Nessus
Tenable Nessus
added 2016/06/06 12:0 a.m.65 views

Amazon Linux AMI : ntp (ALAS-2016-708)

It was found that an ntpd client could be forced to change from basic client/server mode to the interleaved symmetric mode. A remote attacker could use a spoofed packet that, when processed by an ntpd client, would cause that client to reject all future legitimate server responses, effectively...

7.2CVSS6.5AI score0.05403EPSS
Exploits4References5
FreeBSD Advisory
FreeBSD Advisory
added 2016/06/04 12:0 a.m.16 views

FreeBSD-SA-16:24.ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:24.ntp Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities of ntp Category: contrib Module: ntp Announced: 2016-06-04 Credits: Network Time...

7.5CVSS6.8AI score0.53716EPSS
Exploits4
FreeBSD
FreeBSD
added 2016/06/04 12:0 a.m.30 views

FreeBSD -- Multiple ntp vulnerabilities

Problem Description: Multiple vulnerabilities have been discovered in the NTP suite: The fix for Sec 3007 in ntp-4.2.8p7 contained a bug that could cause ntpd to crash. CVE-2016-4957, Reported by Nicolas Edet of Cisco An attacker who knows the origin timestamp and can send a spoofed packet...

7.5CVSS0.7AI score0.53716EPSS
Exploits4
CNVD
CNVD
added 2016/06/03 12:0 a.m.1 views

Unspecified vulnerability in ntpd (CNVD-2016-03821)

ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. An unspecified vulnerability exists in versions of ntpd prior to 4.2.8p8. An attacker can exploit this vulnerability to affect siblin...

7.5CVSS7AI score0.03873EPSS
Exploits0References1
Amazon
Amazon
added 2016/06/02 12:0 a.m.57 views

Medium: ntp

Issue Overview: It was found that an ntpd client could be forced to change from basic client/server mode to the interleaved symmetric mode. A remote attacker could use a spoofed packet that, when processed by an ntpd client, would cause that client to reject all future legitimate server responses...

7.2CVSS7AI score0.05403EPSS
Exploits4
Tenable Nessus
Tenable Nessus
added 2016/06/01 12:0 a.m.64 views

RHEL 6 / 7 : ntp (RHSA-2016:1141)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1141 advisory. The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. These packages include the...

7.5CVSS6.7AI score0.05403EPSS
Exploits6References13
Cent OS
Cent OS
added 2016/05/31 10:58 a.m.85 views

ntp, ntpdate, sntp security update

CentOS Errata and Security Advisory CESA-2016:1141 An update for ntp is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...

7.5CVSS6.7AI score0.05403EPSS
Exploits6References7
RedHat Linux
RedHat Linux
added 2016/05/31 8:11 a.m.4 views

ntp: ntpd switching to interleaved mode with spoofed packets

It was found that an ntpd client could be forced to change from basic client/server mode to the interleaved symmetric mode. A remote attacker could use a spoofed packet that, when processed by an ntpd client, would cause that client to reject all future legitimate server responses, effectively...

7.2CVSS7.1AI score0.05403EPSS
Exploits3References6
Tenable Nessus
Tenable Nessus
added 2016/05/13 12:0 a.m.51 views

openSUSE Security Update : ntp (openSUSE-2016-578)

ntp was updated to version 4.2.8p6 to fix 12 security issues. Also yast2-ntp-client was updated to match some sntp syntax changes. bsc937837 These security issues were fixed : - CVE-2015-8158: Fixed potential infinite loop in ntpq bsc962966. - CVE-2015-8138: Zero Origin Timestamp Bypass bsc963002...

7.7CVSS6.5AI score0.42548EPSS
Exploits5References32
Fedora
Fedora
added 2016/05/12 7:23 a.m.49 views

[SECURITY] Fedora 22 Update: ntp-4.2.6p5-40.fc22

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

7.2CVSS1.3AI score0.05403EPSS
Exploits4
myhack58
myhack58
added 2016/05/11 12:0 a.m.877 views

In-depth understanding of cross-site WebSocket hijacking vulnerability principle and prevention-vulnerability and early warning-the black bar safety net

Preamble WebSocket as the HTML5 new features, one of extra to attract the developer's attention, because it appears that the client mainly refers to the browser provided on the Socket support as possible, so in between the client and server provides a based on a single TCP connection is a...

7.4AI score
Exploits0
Fedora
Fedora
added 2016/05/10 6:6 p.m.53 views

[SECURITY] Fedora 23 Update: ntp-4.2.6p5-40.fc23

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

7.2CVSS1.3AI score0.05403EPSS
Exploits4
Fedora
Fedora
added 2016/05/07 12:19 p.m.42 views

[SECURITY] Fedora 24 Update: ntp-4.2.6p5-40.fc24

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

7.2CVSS1.3AI score0.05403EPSS
Exploits4
appercut
appercut
added 2016/05/01 12:0 a.m.558 views

Apache Camel: source code security analysis report

Several vulnerabilities were discovered in The Apache Software Foundation 'Apache Camel' software: Using Synchronization Primitives in EJB components Missing Verification of Executable Files' Digital Signature when Executing them from Untrusted Sources Violating the Java Object Model Using...

0.5AI score
Exploits0References1Affected Software1
OSV
OSV
added 2016/04/18 12:59 a.m.1 views

CVE-2016-2415

exchange/eas/EasAutoDiscover.java in the Autodiscover implementation in Exchange ActiveSync in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to obtain sensitive information via a crafted application that triggers a spoofed response to a GET request, ak...

5.5CVSS7.3AI score0.00069EPSS
Exploits0References2
Rows per page
Query Builder