CVE-2017-17704

A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Ethernet Door Module. The communications between the IP-ACM and the iStar Ultra is encrypted using a fixed AES key and IV. Each message is encrypted in CBC mode...

CVE-2017-17704

The CVE-2017-17704 entry concerns Software House iStar Ultra devices (up to 6.5.2.20569) used with the IP-ACM Ethernet Door Module. The vulnerability arises from CBC-mode encryption that reuses a fixed IV and key across messages, with no strong authentication of messages. This enables replay of w...

PT-2017-14962

Name of the Vulnerable Software and Affected Versions Software House iStar Ultra versions through 6.5.2.20569 Description A door-unlocking issue was discovered when the Software House iStar Ultra is used with the IP-ACM Ethernet Door Module. The communications between the IP-ACM and the iStar Ult...

CVE-2017-17704: Use of Insufficiently Random Values

A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Ethernet Door Module. The communications between the IP-ACM and the iStar Ultra is encrypted using a fixed AES key and IV. Each message is encrypted in CBC mode...

acm-inmo.com XSS vulnerability

Open Bug Bounty ID: OBB-418467 Description| Value ---|--- Affected Website:| acm-inmo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-2847: Limit the per-user amount of pages allocated in pipes bsc970948. - CVE-2016-3136: mctu232: add sanity checking in probe bnc970955. - CVE-2016-2188: iowarrio...

Linux kernel denial of service vulnerability (CNVD-2016-02789)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'acmprobe' function in the drivers/usb/class/cdc-acm.c file in Linux kernel versions prior to 4.5.1. The vulnerability can be...

DEBIAN-CVE-2016-3138

The acmprobe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL pointer dereference and system crash via a USB device without both a control and a data endpoint descriptor...

UBUNTU-CVE-2016-3138

The acmprobe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL pointer dereference and system crash via a USB device without both a control and a data endpoint descriptor...

PT-2016-5381 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.5.1 Description: The issue allows physically proximate attackers to cause a denial of service, resulting in a NULL pointer dereference and system crash, via a USB device without both a control and a data...

learning.acm.org XSS vulnerability

Vulnerable URL: http://learning.acm.org/search.cfm Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 7 VIP website...

Turing Award — Inventors of Modern Cryptography Win $1 Million Cash Prize

And the Winners of this year's Turing Award are: Whitfield Diffie and Martin E. Hellman. The former chief security officer at Sun Microsystems Whitfield Diffie and the professor at Stanford University Martin E. Hellman won the 2015 ACM Turing Award, which is frequently described as the "Nobel Pri...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the ACM package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Juniper IDP ACM Web服务器跨站脚本漏洞

CVE ID:CVE-2013-6957 Juniper IDP解决方案是业界领先的解决方案,可帮助管理员检测、控制并报告受到各种间谍软件应用威胁的系统。 Juniper IDP没有正确过滤提交给ACM WEB服务器的输入，允许远程攻击者利用漏洞进行跨站脚本攻击，可构建恶意URI，诱使用户解析，可获取敏感信息或者劫持用户会话。 0 Juniper IDP75 Juniper IDP250 Juniper IDP800 Juniper IDP8200 5.1 厂商补丁： Juniper ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2013-6957

Cross-site scripting XSS vulnerability in the web administrative component in Juniper IDP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the ACM web server...

CVE-2013-6957

CVE-2013-6957 is an XSS vulnerability in the Juniper IDP ACM Web Server’s web administration component. The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors to the ACM web server, potentially exposing sensitive information or enabling user session manipulation...

CVE-2013-6957: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web administrative component in Juniper IDP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the ACM web server...

Code injection

Unspecified vulnerability in the Intel Trusted Execution Technology TXT SINIT Authenticated Code Modules ACM before 1.2, as used by the Intel QM77, QS77, Q77 Express, C216, Q67 Express, C202, C204, and C206 chipsets and Mobile Intel QM67 and QS67 chipsets, when the measured launch environment MLE...

CVE-2013-5740

CVE-2013-5740 concerns an unspecified vulnerability in Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) prior to 1.2. Affected are Intel chipsets including QM77/QS77/Q77 Express/C216/Q67 Express/C202/C204/C206 and Mobile Intel QM67/QS67; when the measured launch env...

PT-2013-5762

Name of the Vulnerable Software and Affected Versions Intel Trusted Execution Technology TXT SINIT Authenticated Code Modules ACM versions prior to 1.2 Description The issue allows local users to bypass the Trusted Execution Technology protection mechanism and perform other unspecified SINIT ACM...