Cisco Prime Collaboration Assurance Multiple Vulnerabilities (cisco-sa-20100217-csa)

According to its self-reported version number, the remote Cisco Prime Collaboration Assurance device is prior to 10.5.1.53684 or is in the 10.6 release branch. It is, therefore, affected by the following vulnerabilities : - A security bypass vulnerability exists in the web framework due to improp...

GLSA-201507-13 : Adobe Flash Player: Multiple vulnerabilities (Underminer)

The remote host is affected by the vulnerability described in GLSA-201507-13 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

CVE-2015-7768

creationtimestamp| type| source ---|---|--- 2015-09-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38254 2016-01-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39215 2018-05-29 15:50:33+00:00| seen|...

Thomson CableHome Gateway DWG849 Information Disclosure

Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage: http://www.technicolor.com/en/solutions-services/connected-home/modems-gateways Software Link: n/a Version:...

Thomson CableHome Gateway (DWG849) Cable Modem Gateway - Information Exposure

Thomson CableHome Gateway DWG849 Cable Modem Gateway - Information Exposure Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage:...

Thomson CableHome Gateway (DWG849) Cable Modem Gateway - Information Exposure

Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage: http://www.technicolor.com/en/solutions-services/connected-home/modems-gateways Software Link: n/a Version:...

CVE-2015-5197

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2015-5249

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Amazon Linux: Security Advisory (ALAS-2014-346)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0942

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-6742, CVE-2015-6743, CVE-2015-6744, CVE-2015-6745, CVE-2015-6746, CVE-2015-6747. Reason: This candidate originally combined multiple issues that have different vulnerability types and other complex abstraction issues. Notes:...

SUSE-SU-2015:1374-1 Security update for flash-player

This security update to 11.2.202.508 bsc941239 fixes the following issues: APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541,...

USN-2694-1 pcre3 vulnerabilities

Michele Spagnuolo discovered that PCRE incorrectly handled certain regular expressions. A remote attacker could use this issue to cause applications using PCRE to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. CVE-2014-8964...

CVE-2015-4247

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue in customer-controlled software. Notes: none...

JSF: Information disclosure due to missing access restriction in portlet resource dispatching

It was found that JavaServer Faces PortletBridge-based portlets using GenericPortlet's default resource serving did not restrict access to resources within the web application. An attacker could set the resource ID field of a URL to potentially bypass security constraints and gain access to...

CVE-2015-5122

creationtimestamp| type| source ---|---|--- 2015-07-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37599 2015-07-28 08:14:15+00:00| seen| MISP/55b73940-0078-4ad9-8fba-4095950d210b 2015-08-11 07:17:58+00:00| seen| MISP/55c98ff2-f2fc-4284-8a34-f483950d210b 2015-08-22...

Apple TV < 7.2 Multiple Vulnerabilities

Binary data 8802.prm...

Apple iOS Watch Common Profile App Installation Logic Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. There is an issue with the Apple iOS Watch Universal Profile app installation logic that allows collisions to occur in pre-existing bundle IDs, preventing other apps from being enabled...

Multiple Vulnerabilities in Apple OS X Keychain/WebSocket/Sandbox ACLs

Apple Mac OS X is an operating system for Apple devices. Multiple vulnerabilities exist in the Apple OS X Keychain/WebSocket/Sandbox ACL. 1 A remote user can create an application that, when installed by the target user, can access the target application's keychain entries, delete the keychain...

OpenSSL: Multiple vulnerabilities

Background OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security as well as a general purpose cryptography library. Description Multiple vulnerabilities have been found in OpenSSL. Please review the CVE identifiers referenced below for details. Impac...

Multiple Alcatel-Lucent OmniSwitch Products Session Hijacking Vulnerability

The Alcatel-Lucent OmniSwitch 6450 is a switch product developed by Alcatel-Lucent of France. Several Alcatel-Lucent OmniSwitch products fail to properly generate weak session identifiers in the web management interface, allowing remote attackers to hijack sessions via brute force attacks...