75 matches found
UBUNTU-CVE-2019-15753
In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instance...
CVE-2019-15753
In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instance...
CVE-2019-15753
In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instance...
CVE-2019-15753
CVE-2019-15753 affects OpenStack os-vif 1.15.x before 1.15.2 and 1.16.0, where a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge. This causes obligatory Ethernet flooding of non-local destinations, which degrades network performance and may allow users to view packet contents ...
agingstudies.eu XSS vulnerability
Open Bug Bounty ID: OBB-466648 Description| Value ---|--- Affected Website:| agingstudies.eu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
MaxAge LSA Vulnerability in OSPF Protocol of Multiple Huawei Products Products
Huawei AC6005 and others are products of Huawei, China.Huawei AC6005 is an access control device.CloudEngine 12800 is a data center switch device. A MaxAge LSA vulnerability exists in the OSPF protocol of multiple Huawei products. When the device receives a specific LSA message, the LS Link Statu...
Google Chrome Extensions Subsystem Denial of Service Vulnerability
Google Chrome is a web browser developed by the American company Google Google. A denial of service vulnerability exists in the Chrome Web Store inline-installation implementation in the Extensions subsystem in versions of Google Chrome prior to 52.0.2743.82, which stems from the program's failur...
April 911 Outage Impacted 3.5 Percent of U.S. Population
In the early hours of April 10, a series of errors led to a massive, multi-state outage in the emergency call management centers ECMCs that handle 911 calls in seven geographically dispersed states. The incident originated at an obscure but critical call routing hub in Englewood, Colo., and ended...
Week in Security: Toorcon and SecTor Wrap-up, Bugs and Stuxnet Stances
Autumn conferences grabbed the headlines this week as presentations at the Toorcon Conference in San Diego and SecTor in Toronto wrapped up October, with revelations about the vulnerability of social networking sessions and critical infrastructure headlining. In San Diego, talks at Toorcon came...
ToorCon: New Apps, Old Infrastructure Make Toxic Brew
In a variety of ways, experts at this weekend’s ToorCon Conference warned that the tidal wave of new devices and Web based services is straining an already aging Internet infrastructure, with privacy and security as the first victims. Call it the ‘schizophrenia of now’: a tidal wave of new...
Security Best Practice: Aggressive Aging
Aggressive Aging helps manage the connections table capacity and memory consumption of the firewall to increase durability and stability. Aggressive Aging allows the gateway machine to handle large amounts of unexpected traffic, especially during a Denial of Service attack. A denial of service...
CVE-2005-0248
The Solaris Management Console SMC GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts...
CVE-2005-0248
The Solaris Management Console SMC GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts...
CVE-2005-0248
The CVE-2005-0248 issue affects the Solaris Management Console (SMC) GUI on Solaris 8 and 9. When creating user accounts configured for password aging, the GUI creates accounts with a blank password. This allows remote or local attackers to break into those accounts. The available documents do no...
