7048 matches found
CVE-2017-4975
An issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0. Tiles created by the PCF Tile Generator create a running open security group that overrides security groups set by the operator...
CVE-2017-4975
An issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0. Tiles created by the PCF Tile Generator create a running open security group that overrides security groups set by the operator...
CVE-2017-4975
P CVE-2017-4975 affects Pivotal PCF Tile Generator (versions
Updated libxslt packages fix security vulnerability
The libxslt library failed to seed its random number generator, resulting in predictable random values CVE-2015-9019...
MGASA-2017-0169 Updated libxslt packages fix security vulnerability
The libxslt library failed to seed its random number generator, resulting in predictable random values CVE-2015-9019...
openSUSE Security Update : libxslt (openSUSE-2017-609)
This update for libxslt fixes the following security issues : - CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page bsc1035905. ...
Pivotal PCF Tile Generator Security Bypass Vulnerability
Pivotal PCF Tile GeneratorA set of tools from Pivotal Software to help you develop, package, test and deploy services and other add-ons to Pivotal Cloud Foundry. A security bypass vulnerability exists in Pivotal PCF Tile Generator. An attacker could use this vulnerability to bypass certain securi...
SUSE SLED12 / SLES12 Security Update : libxslt (SUSE-SU-2017:1313-1)
This update for libxslt fixes the following issues : - CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page bsc1035905. -...
SUSE-SU-2017:1313-1 Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page bsc1035905. -...
SUSE SLES11 Security Update : libxslt (SUSE-SU-2017:1282-1)
This update for libxslt fixes the following issues : - CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page bsc1035905. -...
SUSE-SU-2017:1282-1 Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page bsc1035905. -...
EulerOS 2.0 SP1 : libgcrypt (EulerOS-SA-2016-1081)
According to the version of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A design flaw was found in the libgcrypt PRNG Pseudo-Random Number Generator. An attacker able to obtain the first 580 bytes of the PRNG output...
USN-3260-1 firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to read uninitialized memory, obtain sensitive information, spoof the addressbar contents or other UI elements, escape the sandbox to...
UBUNTU-CVE-2017-5462
A flaw in DRBG number generation within the Network Security Services NSS library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerabili...
Huawei WS318 Design Vulnerability
Huawei WS318 is a wireless router product from Huawei China. A security vulnerability exists in Huawei WS318 V100R001C01B022 and prior versions, which stems from insufficient randomness in the random number generator RNG in the vendor solution used by the product. The vulnerability can be exploit...
CVE-2016-10226
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service bitfield out-of-bounds read and application crash via crafted JavaScript code that is mishandled in the operatorString function, related to...
CVE-2014-9690
Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerability of the WPS protocol because the random number generator RNG used in the supplier's solution is not random enough. As a result, brute force cracking the...
CVE-2014-9690
CVE-2014-9690 affects Huawei WS318 home gateways (software versions including V100R001C01B022 and earlier). The underlying issue is an insufficiently random RNG used by the vendor’s WPS implementation, enabling offline PIN brute-forcing. Exploitation allows an attacker to crack the WPS PIN and ga...
Unauthorized Access To Protected Routes
generator-jhipster is vulnerable to unauthorized access to protected routes. The vulnerability exists when generator-jhipster is used with angular2. When the data.authorities property is used to protect the angular2's route, an unauthorized user can successfully view the page...