Lucene search
+L

4012 matches found

Cvelist
Cvelist
added 2017/11/07 4:0 p.m.33 views

CVE-2017-12085

An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A specially crafted packet can make the Circle cloud route a packet to any arbitrary Circle device. An attacker needs network connectivity to the Internet to trigger this vulnerability...

9CVSS9.4AI score0.01671EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2017/11/01 12:0 a.m.38 views

Debian DLA-1152-1 : quagga security update

It was discovered that the bgpd daemon in the Quagga routing suite does not properly calculate the length of multi-segment ASPATH UPDATE messages, causing bgpd to drop a session and potentially resulting in loss of network connectivity. For Debian 7 'Wheezy', these problems have been fixed in...

7.5CVSS7AI score0.1879EPSS
SaveExploits0References3
Talos
Talos
added 2017/10/31 12:0 a.m.42 views

Circle with Disney Apid Photo Upload Denial of Service Vulnerability

Summary An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1. A repeated set of specially crafted API calls can cause the device to corrupt essential memory, resulting in a bricked device. An attacker needs network connectivity to...

7.8CVSS7.7AI score0.01379EPSS
SaveExploits2
Talos
Talos
added 2017/10/31 12:0 a.m.56 views

Circle with Disney Apid Strstr Authentication Bypass Vulnerability

Summary An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A specially crafted token can bypass the authentication routine of the Apid binary, causing the device to grant unintended administrative access. An attacker needs...

9CVSS8.2AI score0.01555EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2017/10/31 12:0 a.m.26 views

Debian DSA-4011-1 : quagga - security update

It was discovered that the bgpd daemon in the Quagga routing suite does not properly calculate the length of multi-segment ASPATH UPDATE messages, causing bgpd to drop a session and potentially resulting in loss of network connectivity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

7.5CVSS7AI score0.1879EPSS
SaveExploits0References5
Talos
Talos
added 2017/10/31 12:0 a.m.34 views

Circle with Disney Apid Server Fork Denial of Service Vulnerability

Summary An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous TCP connections causes the APID daemon to repeatedly fork, causing the daemon to run out of memory and trigger a device reboot. An attacker...

7.8CVSS7.5AI score0.01482EPSS
SaveExploits2
Talos
Talos
added 2017/10/31 12:0 a.m.107 views

Circle with Disney Token Routing Vulnerability

Summary An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A specially crafted packet can make the Circle cloud route a packet to any arbitrary Circle device. An attacker needs network connectivity to the Internet to trigger this vulnerability. Tested...

9.8CVSS8.8AI score0.01671EPSS
SaveExploits2
Debian
Debian
added 2017/10/30 8:2 p.m.64 views

[SECURITY] [DSA 4011-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4011-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2017 https://www.debian.org/security/faq -...

7.5CVSS7.5AI score0.1879EPSS
SaveExploits0
Debian
Debian
added 2017/10/30 8:2 p.m.89 views

[SECURITY] [DSA 4011-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4011-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2017 https://www.debian.org/security/faq -...

5CVSS2.3AI score0.1879EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2017/10/29 12:0 a.m.27 views

Debian: Security Advisory (DSA-4011-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.1879EPSS
SaveExploits0References3
n0where
n0where
added 2017/10/28 5:48 p.m.29 views

Distributed File Analysis Framework: Assemblyline

Assemblyline is a scalable distributed file analysis framework . It is designed to process millions of files per day but can also be installed on a single box. Canada’s electronic spy agency says it is taking the “unprecedented step” of releasing one of its own cyber defence tools to the public, ...

1.3AI score
SaveExploits0References4
Microsoft KB
Microsoft KB
added 2017/10/27 12:0 a.m.8 views

Update Rollup 13 for System Center 2012 R2 Virtual Machine Manager

Update Rollup 13 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Virtual Machine Manager. There are two updates available for Virtual Machine Manager, one for the Virtual Machin...

5.8AI score
SaveExploits0
Citrix
Citrix
added 2017/10/09 12:0 a.m.15 views

HDX applications fails to launch and errors out with an error message “Engine was not loaded, There is no Citrix SSL Server configured on the specified address. Error Number 183”.

HDX applications fail to launch and error out with an error message “Engine was not loaded, There is no Citrix SSL Server configured on the specified address. Error Number 183”. From the Client side trace we see that theclient is unable to make TCP connection with the Second AG Vserver on custom...

7.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2017/09/25 12:0 a.m.9 views

September 25, 2017—KB4040724 (OS Build 15063.632)

None None...

6.1AI score
SaveExploits0
CNVD
CNVD
added 2017/09/11 12:0 a.m.9 views

Local elevation of privilege vulnerability in multiple IBM DB2 products (CNVD-2017-32876)

IBM DB2 and DB2 Connect Server for Linux, UNIX, and Windows are database products for Linux, UNIX, and Windows platforms from IBM Corporation, U.S.A. DB2 is a relational database management system for use in large application environments.DB2 Connect Server is a DB2 Connect Server is a mainframe...

7.2CVSS6.9AI score0.00379EPSS
SaveExploits0References1
Citrix
Citrix
added 2017/09/06 12:0 a.m.12 views

NetScaler 12.0 51.24 Shows Status of Connectivity Between NetScaler SNIP and AppFlow Collector

With the NetScaler Release 12.0 Build 51.24, NetScaler admin can view the status ofconnectivity between NetScaler's SNIP address and Appflow Collector by checking new information called State NetScaler's SNIP address is used to detect network reachability between NetScaler and AppFlow collector. ...

6.8AI score
SaveExploits0
Citrix
Citrix
added 2017/08/30 12:0 a.m.10 views

Policies and Applications are not pushing to iOS devices from Xenmobile (Proxy Enabled Environment)

The device information is not fetched completely on XenMobile and under device setting on XenMobile console we don't see any assigned delivery group. The test connectivity is successful In the Debug logs you can see : | ERROR | pool-47-thread-1 | com.notnoop.apns.internal.ApnsConnectionImpl |...

6.8AI score
SaveExploits0
Citrix
Citrix
added 2017/08/30 12:0 a.m.11 views

Cert Based Authentication + LDAP Enrollment failing for Cloud connector- XenMobile Setup

Under PKI entities, the test connectivity is failing for the CA server XenMobile Debug Logs : 2017-02-06T15:30:57.847+0000 | 200B97A4C77E1C34 | ERROR | http-nio-14443-exec-61 | com.sparus.nps.pki.connector.MsCertSrvConnector |TestConnection to pki url certnew.cer failed with response Headers:...

7.2AI score
SaveExploits0
Citrix
Citrix
added 2017/08/23 12:0 a.m.8 views

Allow Secure Mail to open links to iOS passbook (wallet)

Unable to connect to the Secure Mail iOS to iOS wallet...

6.7AI score
SaveExploits0
zdt
zdt
added 2017/08/14 12:0 a.m.56 views

RealTime RWR-3G-100 Router - Cross-Site Request Forgery (Change Admin Password) Vulnerability

Exploit for hardware platform in category web applications /...

7.1AI score
SaveExploits0
Rows per page
Query Builder