Insufficient Key Length

puppet uses 1024-bit keys for their CA certificate by default, which according to GlobalSign, is insufficiently secure since 2014...

Bit Defender Authentication Token Bypass

Document Title: =============== Bit Defender 39 - Auth Token Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1683 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID: ==================================== 1683...

End of support for Office 2016 and Office 2019

None None...

KLA10937 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA10936. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

Updated xen packages fix security vulnerability

This xen update is based on upstream 4.5.5 maintenance release, and fixes the following security issues: The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service host disk consumption by writing to stdout or stderr CVE-2014-3672 The xrstor...

[ASA-201701-13] icoutils: arbitrary code execution

Arch Linux Security Advisory ASA-201701-13 ========================================== Severity: High Date : 2017-01-09 CVE-ID : CVE-2017-5208 Package : icoutils Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-129 Summary ======= The package icoutils before...

Description of the cumulative update for Office Communications Server 2007 R2, Unified Communications Managed API 2.0 Core Redist 64-bit: March, 2011

Describes the bugs that are resolved in the cumulative update for Office Communications Server 2007 R2, Unified Communications Managed API 2.0 Core Redist 64-bit that is dated March 2011.SummaryThis article describes the issues that is fixed in the cumulative update for Office Communications Serv...

MS15-080: Description of the security update for Silverlight 5: August 11, 2015

MS15-080: Description of the security update for Silverlight 5: August 11, 2015 Summary This security update resolves vulnerabilities in the Microsoft .NET Framework and Microsoft Silverlight. These vulnerabilities could allow remote code execution if a user opens a specially crafted document or...

CVE-2016-6891

MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service out-of-bounds read via a crafted ASN.1 Bit Field primitive in an X.509 certificate...

Out-of-bounds

MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service out-of-bounds read via a crafted ASN.1 Bit Field primitive in an X.509 certificate...

CVE-2016-6891: Out-of-bounds Read

MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service out-of-bounds read via a crafted ASN.1 Bit Field primitive in an X.509 certificate...

PT-2017-9050

Name of the Vulnerable Software and Affected Versions MatrixSSL versions prior to 3.8.6 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read. This occurs when a crafted ASN.1 Bit Field primitive is present in an X.509 certificate...

openSUSE: Security Advisory for xen (openSUSE-SU-2017:0008-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

icoutils -- check_offset overflow on 64-bit systems

Choongwoo Han reports: An exploitable crash exists in the wrestool utility on 64-bit systems where the result of subtracting two pointers exceeds the size of int...

CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

PT-2016-4580 · X.Org Foundation +5 · Libxpm +5

Name of the Vulnerable Software and Affected Versions: libXpm versions prior to 3.5.12 Description: The issue is related to multiple integer overflows that occur when a program requests parsing XPM extensions on a 64-bit platform. This can be triggered by a crafted XPM file, specifically through...

Android tlc_server Heap Overflow Vulnerability

Android suffers from a heap overflow vulnerability in the tlcserver via the LOADTUIRESOURCE command. Android: Heap-overflow in "tlcserver" via LOADTUIRESOURCE command As a part of the TrustZone framework available on Samsung devices, Samsung provides an Android daemon which enables communication...

Null pointer dereference

QEMU aka Quick Emulator built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'currentcpu' remains null, which leads to the null pointer dereference. A user or...

CVE-2016-1922

QEMU aka Quick Emulator built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'currentcpu' remains null, which leads to the null pointer dereference. A user or...

CVE-2016-1922

QEMU aka Quick Emulator built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'currentcpu' remains null, which leads to the null pointer dereference. A user or...