CVE-2013-2193

Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via unspecified vectors...

PT-2014-2572

Name of the Vulnerable Software and Affected Versions Apache HBase versions 0.92.x through 0.92.2 Apache HBase versions 0.94.x through 0.94.8 Description The issue allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via unspecified vectors...

Authentication flaw

OpenText Exceed OnDemand EoD 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext...

CVE-2013-6806

OpenText Exceed OnDemand EoD 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext...

CVE-2013-6806

The CVE-2013-6806 entry concerns OpenText Exceed OnDemand (EoD) 8. A crafted response string allows a man-in-the-middle to disable bidirectional authentication, triggering a downgrade to simple authentication and sending credentials in plaintext. The vulnerability is network-exploitable with medi...

PT-2014-3205

Name of the Vulnerable Software and Affected Versions OpenText Exceed OnDemand EoD version 8 Description The issue allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response. This triggers a downgrade to simple...

CVE-2014-1723

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers IRIs, which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left RTL Unicode text...

PT-2014-1093

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 34.0.1847.116 Description The issue is related to the improper handling of bidirectional Internationalized Resource Identifiers IRIs in the UnescapeURLWithOffsetsImpl function. This makes it easier for remote...

Cisco IOS Software远程拒绝服务漏洞

Bugtraq ID:66515 CVE ID:CVE-2014-2131 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 攻击者可以发送特殊的Virtual Switching Systems VSS或Bidirectional Forwarding Detection BFD报文给受影响设备，可导致拒绝服务攻击。 0 Cisco IOS 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2131...

CVE-2014-2131

The packet driver in Cisco IOS allows remote attackers to cause a denial of service device reload via a series of 1 Virtual Switching Systems VSS or 2 Bidirectional Forwarding Detection BFD packets, aka Bug IDs CSCug41049 and CSCue61890...

CVE-2014-2131: Undefined Security Weakness

The packet driver in Cisco IOS allows remote attackers to cause a denial of service device reload via a series of 1 Virtual Switching Systems VSS or 2 Bidirectional Forwarding Detection BFD packets, aka Bug IDs CSCug41049 and CSCue61890...

Fedora Update for socat FEDORA-2014-1811

Check for the Version of socat OpenVAS Vulnerability Test Fedora Update for socat FEDORA-2014-1811 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for socat FEDORA-2014-1795

Check for the Version of socat OpenVAS Vulnerability Test Fedora Update for socat FEDORA-2014-1795 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

[SECURITY] Fedora 19 Update: socat-1.7.2.3-1.fc19

Socat is a relay for bidirectional data transfer between two independent da ta channels. Each of these data channels may be a file, pipe, device serial l ine etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc.,...

[SECURITY] Fedora 20 Update: socat-1.7.2.3-1.fc20

Socat is a relay for bidirectional data transfer between two independent da ta channels. Each of these data channels may be a file, pipe, device serial l ine etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc.,...

Design/Logic Flaw

Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings...

CVE-2013-2909

Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings...

CVE-2013-2909

Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings...

CVE-2013-2909: Undefined Security Weakness

Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings...

PT-2013-4027

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Apple iTunes affected versions not specified Description The issue is related to a use-after-free vulnerability in Blink, which can be exploited by remote attackers to cause a denial of service or...