1216 matches found
CVE-2017-13016
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...
CVE-2017-13026
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions...
UBUNTU-CVE-2017-13026
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions...
Updated tcpdump packages fix security vulnerabilities
Summary for 4.9.2 tcpdump release Do not use getprotobynumber for protocol name resolution. Do not do any protocol name resolution if -n is specified. Improve errors detection in the test scripts. Fix a segfault with OpenSSL 1.1 and improve OpenSSL usage. Clean up IS-IS printing. Fix buffer...
PT-2017-12890
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ISO ES-IS parser, specifically in the esis print function within the print-isoclns.c file. Recommendations For versions prior to 4.9.2, update to...
Cisco NX-OS IS-IS Packet Processing Denial of Service Vulnerability
According to its self-reported version, the Cisco NX-OS Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...
minidjvu denial of service vulnerability (CNVD-2017-25768)
minidjvu is a command-line utility for encoding and decoding single-page black-and-white DjVu files with the ability to compress multiple pages, taking advantage of similarities between pages. A denial of service vulnerability exists in the rowisempty function in base/4bitmap.c:274 in Minidjvu,...
UBUNTU-CVE-2017-12442
The rowisempty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...
DEBIAN-CVE-2017-12442
The rowisempty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...
UBUNTU-CVE-2017-12441
The rowisempty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...
libming 'OpCode' function denial of service vulnerability (CNVD-2017-20196)
libming is a Flash SWF output library for PHP, Perl, Ruby, Python, C, C ++, Java, and more. The OpCode function called from isLogicalOp and decompileIF in util/decompile.c in Libming suffers from a heap-based buffer over-reading problem that allows an attacker to cause a denial of service via...
python-django: Open redirect and possible XSS attack via user-supplied numeric redirect URLs
A redirect flaw, where the issafeurl function did not correctly sanitize numeric-URL user input, was found in python-django. A remote attacker could exploit this flaw to perform XSS attacks against the OpenStack dashboard...
theroadiscalling.com XSS vulnerability
Vulnerable URL: http://www.theroadiscalling.com/Jobs.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10209128 VIP website status:| No Check theroadiscalling.com SSL connection:|...
Hacker leaks 'Orange is the New Black' Season 5 after Netflix refused to Pay Ransom
After releasing 10 back-to-back episodes of the Season 5 premiere of Netflix's "Orange Is the New Black," a hacking group calling itself The Dark Overlord is threatening to leak a trove of other unreleased TV shows and movies. The Dark Overlord TDO posted links to the first 10 episodes of the...
ALPINE-CVE-2017-7233
Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects namely django.utils.http.issafeurl considered some numeric URLs "safe" when they shouldn't be, aka an open...
iFdate Social Dating Script 2.0 - SQL Injection
Exploit Title: iFdate Social Dating Script v2.0 - SQL Injection Google Dork: N/A Date: 18.03.2017 Vendor Homepage: http://turnkeycentral.com/ Software: http://turnkeycentral.com/scripts/social-dating-script/ Demo: http://demo.turnkeycentral.com/ifdate/index.php Version: 2.0 Tested on: Win7 x64,...
[SECURITY] Fedora 24 Update: quagga-0.99.24.1-5.fc24
Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...
[SECURITY] Fedora 25 Update: quagga-0.99.24.1-5.fc25
Quagga is free software that operates TCP/IP-based routing protocols. It ta kes a multi-server and multi-threaded approach to resolving the current complex ity of the Internet. Quagga supports Babel, BGP4, BGP4+, BGP4-, IS-IS experimental, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intend...
CVE-2017-3804
A vulnerability in Intermediate System-to-Intermediate System IS-IS protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath domain crash because o...