Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: locking issue in drivers/tty/ttyjobctrl.c can lead to an use-after-free CVE-2020-29661 kernel: performance counters race condition use-after-free CVE-2020-14351 kernel: ICMP rate limiting...

Junos OS: MC-LAG DoS (JSA10966)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service DoS vulnerability on devices configured with Multi-Chassis Link Aggregation Group MC-LAG. An unauthenticated, adjacent attacker can exploit this by continuously sending a specially...

CVE-2019-0067 Junos OS: Kernel crash (vmcore) upon receipt of a specific link-local IPv6 packet on devices configured with Multi-Chassis Link Aggregation Group (MC-LAG)

Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart vmcore. By continuously sending a specially crafted IPv6 packet, an attacker can repeatedly crash the system causing a prolonged Denial of Service DoS. This issue affects Juniper Networks Jun...

Medical industry struggles with PACS data leaks

In the medical world, sharing patient data between organizations and specialists has always been an issue. X-Rays, notes, CT scans, and any other data or related files have always existed and been shared in their physical forms slides, paperwork. When a patient needed to take results of a test to...

May 3, 2019—KB4495667 (OS Build 17763.475)

None None...

lag-maerkische-seen.de XSS vulnerability

Open Bug Bounty ID: OBB-719762 Description| Value ---|--- Affected Website:| lag-maerkische-seen.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0284)

The remote OracleVM system is missing necessary patches to address critical security updates : - Revert commit 8bd274934987 'block: fix bdi vs gendisk lifetime mismatch' Ashish Samant Orabug: 28968102 - KVM/x86: Add IBPB support Ashok Raj Orabug: 28703712 - x86/intel/spectrev2: Remove unnecessary...

Liberapay: Improper Data Validation / Unvalidated Input

Steps to reproduce: 1 - Be logged in a account 2 - Go to: https://liberapay.com/user/edit/statement 3 - Click on Visualize 4 - Submit and edit POST parameters to fuzz infinitely 5 - Wait the server proccess the request. I send only 2.813.054 characters. Improper input size validation... I'm sorry...

Please don’t buy this: smart toys

Smart toys attempt to offer what a lot of us imagined as kids—a toy that we can not only play with, but one that plays back. Many models offer voice recognition, facial expressions, hundreds of words and phrases, reaction to touch and impact, and even the ability to learn and retain new...

Troubleshooting ICA_RTT Issues on NetScaler MAS

Troubleshooting ICARTT issues on NetScaler MAS. Background ICA RTT can be thought of as a measurement of the screen lag that a user experiences while interacting with an application hosted in a session on a XenApp or XenDesktop server. ICA RTT is different from Network RTT, which is the detected...

iOS 11.1 tvOS 11.1 watchOS 4.1 - Denial of Service

iOS 11.1 tvOS 11.1 watchOS 4.1 - Denial of Service Exploit Title: TpwnT - iOS Denail of Service POC Date: 10-31-2017 Exploit Author: Russian Otter Ro Vendor Homepage: https://support.apple.com/en-us/HT208222 Version: 2.1 Tested on: iOS 10.3.2 - 11.1 CVE: CVE-2017-13849 """ -----------------------...

CVE-2016-9256

In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the rolemap is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal...

CVE-2016-9256

In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the rolemap is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal...

CVE-2016-9256

In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the rolemap is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal...

F5 BIG-IP - iControl vulnerability CVE-2016-9256

Permissions enforced by iControl can lag behind the actual permissions assigned to a user if the rolemap is not reloaded between the time the permissions are changed and the time of the user SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced...

OpenSSH User Enumeration Vulnerability

OpenSSH OpenBSD Secure Shell is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. A user enumeration vulnerability exists in OpenSSH.The OpenSSH SSH daemon allows for user enumeration with a time lag in user authentication...

GunBound - Denial of Service Vulnerability

Document Title: =============== GunBound - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=664 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================== 664 Common...

Fedora Update for mosh FEDORA-2012-9414

Check for the Version of mosh OpenVAS Vulnerability Test Fedora Update for mosh FEDORA-2012-9414 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

SuSE Update for OpenOffice_org SUSE-SA:2007:001

Check for the Version of OpenOfficeorg OpenVAS Vulnerability Test $Id: gbsuse2007001.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for OpenOfficeorg SUSE-SA:2007:001 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is...