8079 matches found
PT-2016-4764
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communications Server VCS versions X8.0 through X8.7.1 Description The issue allows remote attackers to cause a denial of service, resulting in service disruption. This is achieved via a crafted URI in a SIP header...
CVE-2016-1400: Improper Input Validation
Cisco TelePresence Video Communications Server VCS X8.x before X8.7.2 allows remote attackers to cause a denial of service service disruption via a crafted URI in a SIP header, aka Bug ID CSCuy43258...
[SECURITY] Fedora 23 Update: mingw-openssl-1.0.2h-1.fc23
The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This package contains Windows MinGW libraries and development tools...
Cisco TelePresence Video Communication Server Denial of Service Vulnerability (CNVD-2016-03341)
Cisco TelePresence Video Communication Server VCS is a telepresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A security...
[SECURITY] Fedora 24 Update: mingw-openssl-1.0.2h-1.fc24
The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This package contains Windows MinGW libraries and development tools...
CVE-2016-0341
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network...
CVE-2016-0341
CVE-2016-0341 affects IBM Multi-Enterprise Integration Gateway 1.0–1.0.0.1 and B2B Advanced Communications 1.0.0.2–1.0.0.4. The root cause is missing HTTPS configuration, allowing remote attackers to obtain highly sensitive information via network sniffing. IBM security bulletins for IBM 10x, B2B...
PT-2016-4156
Name of the Vulnerable Software and Affected Versions IBM Multi-Enterprise Integration Gateway versions 1.0 through 1.0.0.1 B2B Advanced Communications versions 1.0.0.2 through 1.0.0.4 Description The issue allows remote attackers to potentially obtain sensitive information by sniffing the networ...
CVE-2016-0341: Exposure of Sensitive Information to an Unauthorized Actor
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network...
[SECURITY] Fedora 22 Update: openssl-1.0.1k-15.fc22
The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...
Cisco IOS and IOS XE and Cisco Unified Communications Manager Software Session Initiation Protocol Memory Leak Vulnerability
A vulnerability in the Session Initiation Protocol SIP gateway implementation in Cisco IOS, IOS XE, and Cisco Unified Communications Manager Software could allow an unauthenticated, remote attacker to cause a memory leak and eventual reload of an affected device. The vulnerability is due to...
[SECURITY] Fedora 24 Update: openssl-1.0.2h-1.fc24
The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...
Cisco IOS Software Intrusion Prevention System Denial of Service Vulnerability (cisco-sa-20120926-ios-ips)
Cisco IOS Software contains a vulnerability in the Intrusion Prevention System IPS feature that could allow an unauthenticated, remote attacker to cause a reload of an affected device if specific Cisco IOS IPS configurations exist. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...
[SECURITY] Fedora 23 Update: openssl-1.0.2h-1.fc23
The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...
SQL injection vulnerability in the 'atdid' parameter of the mining system of Shenzhen JTS Communications Co.
Ltd. is a communication enterprise providing communication services and communication products. A SQL injection vulnerability exists in the program mining system of Shenzhen Jishu Communication Co. The lack of filtering of the 'atdid' parameter allows an attacker to exploit the vulnerability to...
Cisco IOS Software H.323 Denial of Service Vulnerability (cisco-sa-20100922-h323)
The H.323 implementation in Cisco IOS Software contains a vulnerability that may be exploited remotely to cause a denial of service DoS condition on a device that is running a vulnerable version of Cisco IOS Software. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...
HP Data Protector 7.0x < 7.03 build 108 / 8.1x < 8.15 / 9.0x < 9.06 Multiple Vulnerabilities (HPSBGN03580) (Bar Mitzvah)
The version of HP Data Protector installed on the remote host is 7.0x prior to 7.03 build 108, 8.1x prior to 8.15, or 9.0x prior to 9.06. It is, therefore, affected by the following vulnerabilities : - A security feature bypass vulnerability exists, known as Bar Mitzvah, due to improper combinati...
NTT Photopt App Man-in-the-Middle Attack Vulnerability
NTT Photopt App is a suite of applications for managing photos from the NTT Nippon Telegraph and Telephone Corporation group in Japan. A security vulnerability exists in NTT Photopt App version 1.0.0 and 1.1.0, which can be exploited by attackers to conduct man-in-the-middle attacks and listen to...
JVN#11815655: Photopt App fails to verify SSL server certificates
Photopt App provided by NTT Communications Corporation fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provided by th...
