8469 matches found
Cisco Virtual Media Packager Unauthorized Access Vulnerability
Cisco Virtual Media Packager is a virtual media packaging device. An unauthorized access vulnerability exists in Cisco Virtual Media Packager VMP versions 2.6 and earlier, which allows attackers to obtain sensitive information...
SQL Injection Vulnerability in TUTUCMS Order Parameter
TUTUCMS is a CMS image management system focused on the development of image-based websites. TUTUCMS x2.6 version has a SQL injection vulnerability, due to the system does not strictly filter order parameters, only the source code to do the corresponding code audit. Allow attackers to exploit the...
YoruFukurou Denial of Service Vulnerability
YoruFukurou is a very easy to use native Twitter client for Mac OS X. It is a very easy to use Twitter client for Mac OS X. It is a very easy to use Twitter client for Mac OS X. A denial of service vulnerability exists in YoruFukurou version 2.84. An attacker can exploit this vulnerability to cau...
DEBIAN-CVE-2016-5353
epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service application crash via a crafted packet...
Wireshark CORBA IDL Dissector Remote Denial of Service Vulnerability
Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A remote denial of service vulnerability exists in Wireshark versions 2.0.0 through 2.0....
SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)
A padding oracle flaw was found in the Secure Sockets Layer version 2.0 SSLv2 protocol. An attacker could potentially use this flaw to decrypt RSA-encrypted cipher text from a connection using a newer SSL/TLS protocol version, allowing them to decrypt such connections. This cross-protocol attack ...
httpd: X509 client certificate authentication bypass using HTTP/2
A flaw was found in the way httpd performed client authentication using X.509 client certificates. When the HTTP/2 protocol was enabled, a remote attacker could use this flaw to access resources protected by certificate authentication without providing a valid client certificate...
Cisco WebEx Meetings Server SQL Injection Vulnerability
Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A SQL injection vulnerability exists in CWMS version 2.6. A remote attacker can exploit this vulnerability to execu...
Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability (CNVD-2016-04942)
Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A cross-site scripting vulnerability exists in Cisco WebEx Meetings Server CWMS version 2.6. A remote attacker can...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-headers-2.6.8-3-686-smp operating system of the Debian GNU/Linux distribution can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Apache HTTPD Information Disclosure Vulnerability
Apache HTTP Server is an open source web server from the Apache Software Foundation. Apache HTTPD Web Server 2.4.18-2.4.20 fails to properly validate X509 client certificates for resource access over HTTP/2. This could allow third parties to access web server resources without credentials, leadin...
Vulnerability of Cisco IOS software, which allows a malicious actor to trigger a service failure
The vulnerability in Cisco IOS and IOS XE allows malicious actors operating remotely to trigger a service failure device reboot through improperly generated IKEv2 packets...
The vulnerability of the Cisco Wireless LAN Controller 4100 software allows a malicious individual to cause service failure.
The vulnerability in the monitoring service of Multimedia Delivery MLD for Cisco Wireless LAN Controllers WLC – when the MLDv2 Snooping function is enabled – allows malicious actors operating remotely to trigger a device reboot by using improperly crafted IPv6 MLDv2 packets...
The vulnerability of the Cisco Wireless LAN Controller 2000 software allows a malicious individual to cause service failure.
The vulnerability in the monitoring service of Multimedia Delivery MLD for Cisco Wireless LAN Controllers WLC – when the MLDv2 Snooping function is enabled – allows malicious actors operating remotely to trigger a device reboot by using improperly crafted IPv6 MLDv2 packets...
The vulnerability of the WebSphere Application Server software allows a malicious attacker to compromise the accessibility of protected information.
The vulnerability in the IBM Global Security Kit GSKit allows malicious actors to induce a service failure by using a specially crafted handshake during the reestablishment of an SSLv2 session...
PT-2016-6216 · Red Hat +4 · Libvirt +5
Name of the Vulnerable Software and Affected Versions: libvirt versions prior to 2.0.0 Description: The issue allows remote attackers to bypass authentication and establish a VNC session by connecting to the server when the password on a VNC server is set to an empty string. Recommendations: For...
Trane ComfortLink II Stack Buffer Overflow Vulnerability
Trane ComfortLink II is a set of connection control components for use in home intelligence systems from Trane UK. A stack buffer overflow vulnerability exists in the Trane ComfortLink II using firmware version 2.0.2. A remote attacker can exploit this vulnerability by sending a long REG request ...
Pidgin MXIT Protocol Buffer Overflow Vulnerability
Pidgin is a cross-platform real-time communication client that supports several commonly used real-time communication protocols and allows users to log into different real-time communication services with the same software. A buffer overflow vulnerability exists in the MXIT protocol processing of...
Pidgin MXIT Protocol Memory Disclosure Vulnerability
Pidgin is a cross-platform real-time communication client that supports several commonly used real-time communication protocols and allows users to log into different real-time communication services with the same software. A security vulnerability exists in the MXIT protocol processing of Pidgin...