9874 matches found
Denial Of Service (DoS)
The kernel packages contain the Linux kernel, the core of any Linux operating system. A NULL pointer dereference flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled simultaneous connections between the same hosts. A remote attacker could u...
Denial Of Service (DoS)
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...
Denial Of Service (DoS)
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...
Denial Of Service (DoS)
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...
Integer Overflow
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...
Clickjacking Attack
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2012-1948,...
CVE-2018-14875
An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE parameter...
SUSE SLED15 / SLES15 Security Update : freeradius-server (SUSE-SU-2019:1086-1)
This update for freeradius-server fixes the following issues : Security issues fixed : CVE-2019-11235: Fixed an authentication bypass related to the EAP-PWD Commit frame and insufficent validation of elliptic curve points bsc1132549. CVE-2019-11234: Fixed an authentication bypass caused by...
CVE-2019-11412
CVE-2019-11412 affects Artifex MuJS 1.0.5 where jscompile.c can trigger a denial of service due to an invalid stack-frame jump from a missing ENDTRY opcode call. The issue is described in the CVE entry; public remediation references indicate newer MuJS releases (e.g., MuJS 1.0.9) addressing the v...
CVE-2019-11412
An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service invalid stack-frame jump because it lacks an ENDTRY opcode call...
CVE-2019-11412: Always-Incorrect Control Flow Implementation
An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service invalid stack-frame jump because it lacks an ENDTRY opcode call...
PT-2019-12297
Name of the Vulnerable Software and Affected Versions Artifex MuJS version 1.0.5 Description An issue in the jscompile.c file can cause a denial of service due to an invalid stack-frame jump because it lacks an ENDTRY opcode call. Recommendations For Artifex MuJS version 1.0.5, consider applying ...
Broadcom WiFi chipset drivers contain multiple vulnerabilities
Overview The Broadcom wl driver and the open-source brcmfmac driver for Broadcom WiFi chipsets contain multiple vulnerabilities. The Broadcom wl driver is vulnerable to two heap buffer overflows, and the open-source brcmfmac driver is vulnerable to a frame validation bypass and a heap buffer...
Security Bulletin: Vulnerability in Apache ActiveMQ Affects IBM Control Center (CVE-2019-0222)
Summary IBM Control center is affected by a Corrupt MQTT frame that can cause broker shutdown in Apache ActiveMQ. Vulnerability Details CVEID: CVE-2019-0222 DESCRIPTION: IBM Control center is affected by a Corrupt MQTT frame that can cause broker shutdown in Apache ActiveMQ. CVSS Base Score: 7.5...
PT-2019-12500 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.7 Description: A NULL pointer dereference can occur when megasas create frame pool fails in megasas alloc cmds in drivers/scsi/megaraid/megaraid sas base.c. This causes a Denial of Service, related to a...
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2019-4612)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4612 advisory. - can: gw: ensure DLC boundaries after CAN frame modification Oliver Hartkopp Orabug: 29215297 CVE-2019-3701 CVE-2019-3701 - exec: Fix mem leak in...
CVE-2019-9503
The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and unprocessed. I...
UBUNTU-CVE-2019-9503
The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and unprocessed. I...
CVE-2018-1853: Improper Restriction of Rendered UI Layers or Frames
IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch...
Passit: URL is vulnerable to clickjacking https://app.passit.io/
URLs do not have X-FRAME-OPTIONS set to DENY or SAMEORIGIN, and they are vulnerable to clickjacking. Reproduce steps: 1. enter your credentials and click on stay logged into this device then login 2. Run under the browser's code and you will see that the listed links are vulnerable to clickjackin...