5636 matches found
May 8, 2018âKB4103721 (OS Build 17134.48)
None None...
CVE-2018-8003
Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated user to craft an HTTP request which provides read-only access to any file on the filesystem of the host the Ambari Server runs on that is accessible by the user the Ambari Server is...
USN-3346-2: Bind regression | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description USN-3346-1 fixed vulnerabilities in Bind. The fix for CVE-2017-3142 introduced a regression in the ability to receive an AXFR or IXFR in the case where TSIG is used and not every message is signed. This...
Microsoft Windows 10: Change the time zone
This policy setting determines which users can adjust the time zone that is used by the device for displaying the local time, which includes the device OpenVAS Vulnerability Test $Id: win10changetimezone.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Change the time zone WMI Authors:...
Composr CMS Cross-Site Scripting Vulnerability
Composr CMS is an open source content management system CMS developed using HTML, CSS and WCAG technologies. A cross-site scripting vulnerability exists in Composr CMS version 10.0.13. A remote attacker can exploit this vulnerability by sending a page=admin-setupwizard&type=step3 request to...
April 17, 2018âKB4093121 (Preview of Monthly Rollup)
None None...
April 17, 2018âKB4093113 (Preview of Monthly Rollup)
None None...
gcc security, bug fix, and enhancement update
4.8.5-28.0.1 - Orabug: 27557686 Egeyar Bagcioglu - Introduce 'oraclerelease' into .spec file. Echo it to gcc/DEV-PHASE. 4.8.5-28 - Minor testsuite fixes to clean up test results 1469697 - retpoline support for spectre mitigation 1535655 4.8.5-27 - bump for rebuild with RELRO enabled even for...
April 10, 2018âKB4093109 (OS Build 10586.1540)
None None...
zone-telechargement.cc XSS vulnerability
Open Bug Bounty ID: OBB-593885 Description| Value ---|--- Affected Website:| zone-telechargement.cc Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2018-07304)
Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in the Zone-Based Firewall code in Cisco IOS XE Software. A remote attacker could exploit this vulnerability to cause a denial of service crash...
CVE-2018-0157
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...
Design/Logic Flaw
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...
CVE-2018-0157
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...
CVE-2018-0157
The CVE-2018-0157 issue affects Cisco IOS XE Software Zone-Based Firewall, caused by how fragmented IPv4/IPv6 packets are handled in the firewall code. An unauthenticated remote attacker can trigger a device reload/DoS by sending fragmented packets. Affected releases are Everest-16.4.1, Everest-1...
CVE-2018-0157
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...
Cisco IOS XE Software Zone-Based Firewall IP Fragmentation Denial of Service Vulnerability
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...
CVE-2018-0157: Undefined Security Weakness
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...
PT-2018-8647
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software versions Everest-16.4.1 through Everest-16.6.1a Description: A vulnerability in the Zone-Based Firewall code could allow an unauthenticated, remote attacker to cause a device to reload. The issue is due to the handling o...
CVE-2018-0942
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow elevation of privilege, due to how Internet Explorer handles zone and integrity...