827 matches found
CVE-2016-4995
Foreman is affected in versions prior to 1.11.4 and 1.12.x prior to 1.12.1. The issue is an information-disclosure vulnerability where remote authenticated users with permission to view some hosts can access sensitive host configuration data through a URL referencing a hostname, due to improper r...
CVE-2016-4995
Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, which allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information via a URL with a hostname...
PT-2016-6210 · Foreman · Foreman
Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.11.4 Foreman versions 1.12.x prior to 1.12.1 Description: The issue allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information. This is possible because...
[SECURITY] Fedora 23 Update: dhcp-4.3.3-10.P1.fc23
DHCP Dynamic Host Configuration Protocol...
Tmdocs dns_dhcp SQL Injection Vulnerability
Tmdocs dnsdhcp is a web interface that allows management of DNSmasq a tool for configuring DNS and DHCP and static DHCP leases in Mikrotik routers. A SQL injection vulnerability exists in Tmdocs dnsdhcp. An attacker could use this vulnerability to take control of an application, access or modify...
openstack-neutron: MAC source address spoofing vulnerability
Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...
openstack-neutron: ICMPv6 source address spoofing vulnerability
Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...
openstack-neutron: DHCP spoofing vulnerability
Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...
openstack-neutron: MAC source address spoofing vulnerability
Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the dhcp3-relay package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerability of Cisco Nexus 5000 software, allowing attackers to access confidential information
The GNU Bash command shell, as of version 4.3 bash43-025, incorrectly handles lines that follow the declaration of a specially crafted function, which is exported as a variable. This allows a malicious actor to read and write arbitrary files, as well as perform other unconfirmed actions. Security...
The vulnerability of the Cisco Unified Communications Manager software allows a malicious actor to execute arbitrary code.
The GNU Bash command shell, as of version 4.3 and later, incorrectly handles lines that follow the declaration of a function that is exported as a variable. This allows a malicious actor to execute arbitrary code by interfering with environment variables. Security researchers have confirmed that...
The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a “disconnection”
Cisco IOS software contains a vulnerability in the DHCP service, which allows a remote attacker to cause a router to generate a “service failure” by manipulating DHCP packets...
DEBIAN-CVE-2016-5363
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via 1 a crafted DHCP discovery message or 2 crafted non-IP traffi...
DEBIAN-CVE-2016-5362
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message...
UBUNTU-CVE-2016-5363
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via 1 a crafted DHCP discovery message or 2 crafted non-IP traffi...
OpenStack Neutron DHCP Spoofing Vulnerability
OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA in collaboration with Rackspace, Inc. in the U.S. Neutron is one of the networking components that provides Network-as-a-Service NaaS, which enables the creating networks between...
[SECURITY] Fedora 22 Update: dhcp-4.3.2-8.fc22
DHCP Dynamic Host Configuration Protocol...