Denial Of Service (DoS)

pacemaker is vulnerable to denial of service DoS attacks. The vulnerability exists as pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service node disconnection via an unauthenticated connection...

Privilege Escalation

libglusterfs.so is vulnerable to privilege escalation. A malicious user can use an unauthenticated gluster client to connect and mount arbitrary gluster storage volumes that can escalate privileges through a scheduled cronjob...

CVE-2016-7797

Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service node disconnection via an unauthenticated connection...

CVE-2016-7797

CVE-2016-7797 affects Pacemaker prior to 1.1.15. The issue can allow a remote, unauthenticated attacker (via pacemaker remote) to cause a denial of service resulting in node disconnection. The connected sources corroborate the high-level impact and reference related advisories (e.g., RHSA-2016:25...

CVE-2016-7797

Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service node disconnection via an unauthenticated connection...

CentOS 7 : pacemaker (CESA-2016:2578)

An update for pacemaker is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

pacemaker security update

CentOS Errata and Security Advisory CESA-2016:2578 An update for pacemaker is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

pacemaker: pacemaker remote nodes vulnerable to hijacking, resulting in a DoS attack

It was found that the connection between a pacemaker cluster and a pacemakerremote node could be shut down using a new unauthenticated connection. A remote attacker could use this flaw to cause a denial of service...

Debian DSA-3171-1 : samba - security update

Richard van Eeden of Microsoft Vulnerability Research discovered that Samba, a SMB/CIFS file, print, and login server for Unix, contains a flaw in the netlogon server code which allows remote code execution with root privileges from an unauthenticated connection. %NASLMINLEVEL 70300 C Tenable...

RSA BSAFE Micro Edition Suite/SSL-J Security Bypass Vulnerability

The RSA BSAFE security software products provide developers with a complete set of solutions to help them achieve a variety of security goals for their applications. A security bypass vulnerability exists in RSA BSAFE Micro Edition Suite/SSL-J due to the program failing to properly validate an SS...

openSUSE Security Update : python-cupshelpers (openSUSE-SU-2011:1331-2)

This update fixes a typo from the previous update : system-config-printer used an unauthenticated connection when downloading printer drivers from openprinting.org CVE-2011-4405. This update disables the printer driver download feature. system-config-printer did not properly quote shell meta...

openSUSE Security Update : python-cupshelpers (openSUSE-SU-2011:1331-2)

This update fixes a typo from the previous update : system-config-printer used an unauthenticated connection when downloading printer drivers from openprinting.org CVE-2011-4405. This update disables the printer driver download feature. system-config-printer did not properly quote shell meta...

ESA-2012-057: EMC Smarts Network Configuration Manager Multiple Vulnerabilities

ESA-2012-057.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-057: EMC Smarts Network Configuration Manager Multiple Vulnerabilities EMC Identifier: ESA-2012-057 CVE Identifier: CVE-2012-4614 CVE Identifier: CVE-2012-4615 Severity Rating: CVSS v2 Base Score: See below for individual...

Linux kernel 2.6.x iptables '--syn'规则安全绕过漏洞

Bugtraq ID: 53733 CVE ID：CVE-2012-2663 Linux是一款开源的操作系统。 Linux Kernel iptables在某些情况下不正确处理SYN+FIN，攻击者可以发送SYN/FIN绕过所有包含--syn的访问规则，未授权创建连接。 0 Linux kernel 2.6.x 厂商解决方案 Linux ----- 用户可参考如下供应商提供的安全公告获得补丁信息：...

Debian: Security Advisory (DSA-2450-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.1 Security Update : system-config-printer (SAT Patch Number 5607)

The following issues have been fixed : - system-config-printer used an unauthenticated connection when downloading printer drivers from openprinting.org CVE-2011-4405. This update disables the printer driver download feature. - system-config-printer did not properly quote shell meta characters in...

znc DoS

NULL pointer dereference when traffic statistics are requested while there is an unauthenticated connection...

DSA-2069-1 znc - denial of service

Bulletin has no description...

SYMSA-2006-002: McAfee WebShield SMTP Format String Vulnerability

Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-002 Advisory Name: McAfee WebShield SMTP Format String Vulnerability Release Date : 04-03-2005 Application : McAfee WebShield SMTP 4.5 MR1a Platform : Microsoft Windows Severity : System...