2624 matches found
Fall back from TCP to UDP fails / displays SSL Error when Disconnecting and Reconnecting session via NetScaler
If HDX Adaptive Transport Policy set to Preferred on DDC and when attempting to connect to an Application or Desktop using Citrix Receiver for Windows 4.10 or Citrix Receiver for Mac 12.8 or Citrix Receiver for iOS 7.5 and above, you may encounter below issues: Session will get disconnect if...
DEBIAN-CVE-2018-5776
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...
CVE-2018-5776
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...
UBUNTU-CVE-2018-5776
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...
CVE-2018-5776: Improper Neutralization of Input During Web Page Generation
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...
PT-2018-17139
Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 4.9.2 Description: The issue concerns a cross-site scripting XSS problem in the Flash fallback files in MediaElement, located under wp-includes/js/mediaelement. Recommendations: For WordPress versions prior to 4.9....
POODLE Attack
crypto/tls in github.com/golang/go is vulnerable to the POODLE attack. The vulnerability exists due to the default SSLv3 fallback configuration in crypto/tls...
WordPress 3.7-4.9.1 - Cross-Site Scripting vulnerability
Cross-Site Scripting vulnerability found in WordPress 3.7-4.9.1 versions in the Flash fallback files in MediaElement, a library that is included with WordPress. Solution Update your Wordpress to the latest available version at least 4.9.2...
DEBIAN-CVE-2015-2320
The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...
CVE-2015-2320
The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...
CVE-2015-2320
The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...
CVE-2015-2320
The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...
CVE-2015-2320
The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...
CVE-2015-2320: Improper Certificate Validation
The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...
CVE-2017-14387
The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings including the NFS export security flavor for authentication that can be leveraged by current and future NFS exports. This NFS service contained a flaw that did not properly...
CVE-2017-14387
The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings including the NFS export security flavor for authentication that can be leveraged by current and future NFS exports. This NFS service contained a flaw that did not properly...
CVE-2017-14387
The CVE-2017-14387 issue concerns EMC Isilon OneFS NFS exports. The affected products are OneFS versions 8.1.0.0, 8.0.1.0–8.0.1.1, and 8.0.0.0–8.0.0.4. The flaw is that changes to the default NFS export security flavor are not consistently propagated to all new and existing NFS exports configured...
CVE-2017-14387: Undefined Security Weakness
The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings including the NFS export security flavor for authentication that can be leveraged by current and future NFS exports. This NFS service contained a flaw that did not properly...
Downgrade Attack
The openssl gem is vulnerable to downgrade attacks. A malicious user can signal a protocol with a fallback flag even if the server supports a more secure of TLS, allowing a malicious user to conduct attacks through previously patched vulnerabilities...
CVE-2014-8492: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...