605 matches found
ALPINE-CVE-2017-9344
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by zero. This was addressed in epan/dissectors/packet-btl2cap.c by validating an interval value...
Interval International app for iOS authentication vulnerability
Interval International app for iOS is a travel management software from Interval USA. An authentication vulnerability exists in versions 3.3 through 3.5.1 of the Interval International app for iOS, which stems from the program failing to validate an X.509 certificate on the server side of an SSL...
CVE-2017-8941
The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-8941
The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-8941
The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-8941
The CVE-2017-8941 entry concerns the Interval International iOS app (versions 3.3–3.5.1) failing to validate X.509 certificates from SSL servers. Root cause: the app does not verify server certificates, which can allow a man‑in‑the‑middle attacker to spoof trusted servers and obtain sensitive inf...
CVE-2017-8941: Improper Certificate Validation
The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2017-18642
Name of the Vulnerable Software and Affected Versions Interval International app versions 3.3 through 3.5.1 for iOS Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509 certificates...
AIX 7.2 TL 1 : ntp (IV92067) (deprecated)
NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2016-7427 NTP is vulnerable to a denial of service, caused by an error in broadcast mode replay prevention functionality. By sending specially crafted NTP packets, a local attacker could exploit this vulnerability to cause a denial o...
CVE-2016-7601
Affected product: iOS before 10.2; Local Authentication logic issue where the idle timer is not honored when the Touch ID prompt is visible. Root cause: idle-timer handling when Touch ID prompt appears, allowing prolonged unlocked state. Impact: a nearby or local user could potentially access thr...
CVE-2016-7601: Undefined Security Weakness
An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Local Authentication" component, which does not honor the configured screen-lock time interval if the Touch ID prompt is visible...
DEBIAN-CVE-2016-7428
ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast packet...
CVE-2016-7428
ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast packet...
CVE-2016-7428
ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast packet...
CVE-2016-7428: Uncontrolled Resource Consumption
ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast packet...
UBUNTU-CVE-2016-7428
ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast packet...
PT-2016-7324
Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 Description The issue allows remote attackers to cause a denial of service, potentially by exploiting the poll interval in a broadcast packet or through a NULL pointer dereference when the trap service is enabled...
NTP.org ntpd contains multiple denial of service vulnerabilities
Overview NTP.org ntpd versions ntp-4.2.7p385 up to but not including ntp-4.2.8p9 and ntp-4.3.0 up to but not including ntp-4.3.94 contain multiple denial of service vulnerabilities. Description NTP.org's ntpd, versions ntp-4.2.7p385 up to but not including ntp-4.2.8p9 and ntp-4.3.0 up to but not...
CVE-2016-8667
The rc4030write function in hw/dma/rc4030.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service divide-by-zero error and QEMU process crash via a large interval timer reload value...