230 matches found
RHEL 6 : openssh (RHSA-2019:0711)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0711 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary f...
The vulnerability of the Skype instant messaging application for Android operating systems allows a hacker to bypass screen lockdowns and gain access to protected information.
The vulnerability of the Skype instant messaging application for Android operating systems is related to errors in processing special authentication requests. Exploiting this vulnerability could allow a hacker to bypass screen lock mechanisms and gain access to protected information...
PT-2019-1372 · Cisco · Cisco Firepower Management Center
Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center affected versions not specified Description: The issue is related to errors in resource management in the Shell Access Filter feature of Cisco Firepower Management Center. It could allow a remote attacker to...
Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2019-16181)
Microsoft Windows 10 and others are products of Microsoft Corporation USA.Microsoft Windows 10 is an operating system for personal computers; Windows Server 2016 is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows that stems from a program's failure t...
Skype for Android Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests. An attacker who successfully exploited this vulnerability could bypass Android's lockscreen and access a victim's personal information. To exploit the vulnerability, an...
PT-2019-1122
Name of the Vulnerable Software and Affected Versions: Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers Description: An elevation of privilege issue exis...
PT-2019-1167 · Microsoft · Skype
Name of the Vulnerable Software and Affected Versions: Skype versions 8.35 Description: The issue is related to errors in handling specific authentication requests, which can allow an attacker to bypass screen lock and access protected information. This is an elevation of privilege issue that...
Microsoft Active Directory Federated Services (ADFS) User Enumeration
Credits: Joshua Platz aka Binary1985 + CVE ID: Requested + Website: https://github.com/binary1985 + Source: https://raw.githubusercontent.com/binary1985/VulnerabilityDisclosure/master/ADFS-Timing-Attack Vendor: ========================== http://www.microsoft.com Product: =========== Active...
OpenSSH User Enumeration Vulnerability (CNVD-2018-20960)
OpenSSH OpenBSD Secure Shell is a set of connection tools for secure access to remote computers maintained by the OpenBSD Project Group. The tools are an open source implementation of the SSH protocol and support encryption of all transmissions, effectively blocking eavesdropping, connection...
IBM BigFix Platform Brute Force Vulnerability
IBM BigFix platform is a dynamic set of IBM's integrated messaging content-driven and management system multi-technology platform. A security vulnerability exists in the BigFix Relay Diagnostic page in IBM BigFix Platform versions 9.2 and 9.5, which stems from the program failing to limit the...
python-paramiko: Authentication bypass in transport.py
It was found that when acting as an SSH server, paramiko did not properly check whether authentication is completed before processing other requests. A customized SSH client could use this to bypass authentication when accessing any resources controlled by paramiko...
Multiple Belden Hirschmann Switch Products Brute Force Vulnerabilities
Belden Hirschmann RS, etc. are switch products of Belden USA. A security vulnerability exists in the web interface of multiple Belden Hirschmann switch products, which stems from the program failing to properly limit the number of authentication requests. An attacker could use this vulnerability ...
Cross site scripting
Cross-site scripting XSS vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to failed authentication requests alerts...
CVE-2017-16884
Cross-site scripting XSS vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to failed authentication requests alerts...
Microsoft Skype for Business Elevation of Privilege Vulnerability
Microsoft Lync 2013 SP1 and Skype for Business 2016 are both products of Microsoft Corporation.Microsoft Lync formerly known as Microsoft Office Communicator 2013 SP1 is a new generation of integrated communication platform for the enterprise. Skype for Business 2016 is a set of integrated...
Users get multiple OTP Push Notifications, Radius servers see multiple Auth requests & Auth Failures
Users will receive authentication denials, may receive multiple Push Notifications, Radius servers will log multiple simultaneous authentication requests for the same user with different Radius IDs, or user One Time Password tokens will become locked out. If you review traces, you will see multip...
The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure
The vulnerability of the LSASS component in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger a service failure reboot through a specially crafted authentication request...
MS17-004: Security Update for Local Security Authority Subsystem Service (3216771)
The remote Windows host is missing a security update. It is, therefore, affected by a denial of service vulnerability in the Local Security Authority Subsystem Service LSASS component due to improper handling of authentication requests. An unauthenticated, remote attacker can exploit this to...
CVE-2016-0917
The SMB service in EMC VNXe VNXe3200 Operating Environment prior to 3.1.5.8711957 and VNXe3100/3150/3300 Operating Environment prior to 2.4.4.22638, VNX1 File OE before 7.1.80.3, VNX2 File OE before 8.1.9.155, and Celerra all supported versions does not prevent duplicate NTLM challenge-response...
