683 matches found
DEBIAN-CVE-2016-9147
named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a response containing an inconsistency among the DNSSEC-related RRsets...
Design/Logic Flaw
named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a response containing an inconsistency among the DNSSEC-related RRsets...
XenServer Pool Master is Unable to Boot with Error: "unexpected inconsistency; Run fsck Manually"
The following error is displayed when booting XenServer pool master: "Unexpected inconsistency; Run fsck Manually" The df -h command shows filesystem is read only...
Update Rollup 11 for System Center 2012 Virtual Machine Manager Service Pack 1
Update Rollup 11 for System Center 2012 Virtual Machine Manager Service Pack 1 Introduction This article describes the issues that are fixed in Update Rollup 11 for Microsoft System Center 2012 Virtual Machine Manager Service Pack 1 SP1. There is one update available for System Center 2012 SP1...
CVE-2016-5181
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via crafted HTML pages...
Inconsistent name for term access query
More info at https://www.drupal.org/SA-CORE-2016-005...
chromium-browser: universal xss in blink
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via crafted HTML pages...
UBUNTU-CVE-2016-5181
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via crafted HTML pages...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.
The vulnerability of the ImageInputType::ensurePrimaryContent function WebKit/Source/core/html/forms/ImageInputType.cpp in the Blink browser engine of Google Chrome is related to improper handling of time and state in the environment. Exploiting this vulnerability may allow a malicious actor to...
Backup and Replicas of virtual machines running on ESXi 6.0.x with Change Block Tracking (CBT) enabled may not be recoverable
Challenge Leveraging VMware Changed Block Tracking CBT data supplied by VMware ESXi 6.0 can potentially render the data in backups or replicas inconsistent or corrupt. Cause This is a VMware ESXi issue in CBT logic that affects ESXi 6.0 through ESXi 6.0 Update 1a. It is resolved with VMware ESXi...
Views - Critical - Access Bypass - SA-CONTRIB-2015-103
The Views module provides a flexible method for Drupal site designers to control how lists and tables of content, users, taxonomy terms and other data are presented. Access bypass due cache inconsistency Due to an issue in the caching mechanism of Views it's possible that configured filters lose...
CVE-2015-1084
CVE-2015-1084 affects WebKit as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4. The UI may display URLs inconsistently, allowing remote attackers to conduct phishing attacks via a crafted URL. The connected documents confirm the affected product/section and the describe...
Mac OS X : Apple Safari < 6.2.4 / 7.1.4 / 8.0.4 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X host is prior to 6.2.4 / 7.1.4 / 8.0.4. It is, therefore, affected by multiple memory corruption vulnerabilities in WebKit due to improperly validated user-supplied input. A remote attacker, using a specially crafted website, can exploi...
"Ettercap 8.0 - 8.1" multiple vulnerabilities
"Ettercap 8.0 - 8.1" multiple vulnerabilities Description ------------------------------------------------------------ Twelve vulnerabilities exist on ettercap-ng which allow remote denial of service and possible remote code execution. Specifically, the following vulnerabilities were identified: ...
"Aircrack-ng 1.2 Beta 3" multiple vulnerabilities
"Aircrack-ng 1.2 Beta 3" multiple vulnerabilities Description: -------------------------------- Four vulnerabilities exist on aircrack-ng = 1.2 Beta 3 which allow remote/local code execution, privilege escalation and denial of service. Specifically, the following vulnerabilities were identified: ...
CVE-2013-2139
Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service crash via vectors related to a length inconsistency in the cryptopolicysetfromprofileforrtp and srtpprotect functions...
ipa: servers do not publish correct CRLs
The default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a certificate from an Identity Management replica, does not properly update another Identity Management replica, which causes inconsistent Certificate Revocation Lists CRLs to be used and might allow remote...
TVMOBiLi Media Server Multiple Remote DoS Vulnerabilities
Advisory ID: HTB23120 Product: TVMOBiLi media server Vendor: TVMOBiLi Vulnerable Versions: 2.1.0.3557 and probably prior version Tested Version: 2.1.0.3557 in Windows XP SP3 32 bits Vendor Notification: October 15, 2012 Vendor Patch: November 21, 2012 Public Disclosure: December 5, 2012...
TVMOBiLi Media Server 2.1.0.3557 Denial Of Service
TVMOBiLi Media Server version 2.1.0.3557 suffers from a denial of service vulnerability via a malicious HTTP request. Product: TVMOBiLi media server Vendor: TVMOBiLi Vulnerable Versions: 2.1.0.3557 and probably prior version Tested Version: 2.1.0.3557 in Windows XP SP3 32 bits Vendor Notification...
CVE-2012-2796
Unspecified vulnerability in the vc1decodeframe function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to inconsistencies in "coded slice positions and interlacing" that trigger "out of array writes."...