SUSE SLES11 Security Update : strongswan (SUSE-SU-2017:1471-1)

This update for strongswan fixes the following issues : - CVE-2017-9022: Insufficient Input Validation in gmp Plugin leads to Denial of service bsc1039514 - CVE-2017-9023: Incorrect x509 ASN.1 parser error handling could lead to Denial of service bsc1039515 Note that Tenable Network Security has...

CVE-2017-6652

A vulnerability in the web framework of the Cisco TelePresence IX5000 Series could allow an unauthenticated, remote attacker to access arbitrary files on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using directory...

The vulnerability of the Mac OS X operating system and the iOS operating system allows a perpetrator to trigger a service failure.

The vulnerability of the CoreGraphics component in the Mac OS X and iOS operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted image...

The vulnerability of the Mac OS X operating system allows a hacker to execute arbitrary code in a privileged context.

The vulnerability of the Kernel component of the Mac OS X operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application...

Design/Logic Flaw

InspIRCd before 2.0.7 allows remote attackers to cause a denial of service infinite loop...

CVE-2012-6697

InspIRCd before 2.0.7 allows remote attackers to cause a denial of service infinite loop...

CVE-2012-6697

InspIRCd before 2.0.7 allows remote attackers to cause a denial of service infinite loop...

CVE-2012-6697

InspIRCd before 2.0.7 allows remote attackers to cause a denial of service infinite loop...

Cisco Application-Hosting Framework Directory Traversal Vulnerability

A vulnerability in the web framework code of the Cisco application-hosting framework CAF component of the Cisco IOx application environment could allow an unauthenticated, remote attacker to read any file from the CAF in the virtual instance running on the affected device. SPDX-FileCopyrightText:...

Cisco Application-Hosting Framework Arbitrary File Creation Vulnerability

A vulnerability in the Cisco application-hosting framework CAF component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance running on the affected device. SPDX-FileCopyrightText: 2017 Greenbone AG Some...

CVE-2017-3852

A vulnerability in the Cisco application-hosting framework CAF component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance running on the affected device. The vulnerability is due to insufficient input...

CVE-2017-3858

A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of HTTP parameters supplied by the user. An attacker could...

PT-2017-1939

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue exists due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. It allows a remote attacker to execute arbitrary code using...

PT-2016-2968 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is due to insufficient input validation in Microsoft Edge, allowing a remote attacker to potentially tamper with web page content using a specially crafted website...

Cisco IOS Software Data in Motion Denial of Service Vulnerability (cisco-sa-20160914-ios-xe)

A vulnerability in the Data in Motion DMo application in Cisco IOS software with the IOx feature set could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the DMo process. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Bluetooth component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges by connecting devices via Bluetooth while the main user is working...

TYPO3 Form Component Arbitrary File Disclosure Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. An arbitrary file disclosure vulnerability exists in the TYPO3 Form component. An attacker could exploit this vulnerability to obtain sensitive information because the program...

Security Advisory - Insufficient Input Validation Vulnerability in the FusionInsight

The FusionInsight has an insufficient input validation vulnerability. An attacker may exploit it to gain the root privilege of the Linux system where the software resides and control the operating system cluster. Vulnerability ID: HWPSIRT-2016-06010 This vulnerability has been assigned Common...

Oracle Application Testing Suite DownloadServlet file Directory Traversal (CVE-2016-0482)

A directory traversal vulnerability exists in Oracle Application Testing Suite. The vulnerability is due to insufficient input validation while processing HTTP requests to the "/otm/download" URI with the "file" parameter. A remote unauthenticated attacker can exploit this vulnerability by sendin...

Oracle ATS DownloadServlet scheduleReportName Directory Traversal (CVE-2016-0481)

A directory traversal vulnerability exists in Oracle's Application Testing Suite. The vulnerability is due to insufficient input validation while processing HTTP requests to the "/otm/download" URI with parameter scheduleReportName. A remote unauthenticated attacker can exploit this vulnerability...