CVE-2016-8020

Affected software : McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. Vulnerability : CVE-2016-8020 — improper control of generation of code, allowing an authenticated remote attacker to execute arbitrary code via a crafted HTTP request parameter. Impact : remote code execution with...

Cisco Web Security Appliance Certificate Generation Command Injection Vulnerability

The Cisco Web Security Appliance is a network appliance from Cisco. A security vulnerability exists in the admin web interface of Cisco AsyncOS in the Cisco WSA Appliance. A remote attacker can exploit this vulnerability to gain root privileges via a specially crafted certificate-generation...

NTP 'ntp-keygen.c' Predictive Random Number Vulnerability

NTP Network Time Protocol is a protocol used by clients to synchronize the date and time with a time server. A security vulnerability in NTP 'ntp-keygen.c' allows attackers to take control of the server by guessing the MD5 generated key...