Simple DirectMedia Layer SDL2_image Heap Buffer Overflow Vulnerability

Simple DirectMedia Layer is a multi-platform library for accessing low-level hardware and graphics and providing support for games, software, and emulators. sdl2image is a component used in it for parsing and displaying various image file formats. A heap buffer overflow vulnerability exists in th...

CVE-2018-0591

The KINEPASS App for Android Ver 3.1.1 and earlier, and for iOS Ver 3.1.2 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Cisco Firepower System Software Denial of Service Vulnerability (CNVD-2018-11127)

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco, Inc.Secure Sockets Layer SSL is one of the SSL Secure Sockets Layer engines. A resource management error vulnerability exists in the SSL engine in Cisco Firepower System Software that stems from the program...

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transport Layer Security Library Input Validation Vulnerability

The Cisco Adaptive Security Virtual Appliance and others are security appliances from Cisco in the U.S. The Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software are operating systems that run in different security appliances. Adaptive Security Appliance ASA Software...

Cannot run Windows updates on Office layer due to error C80001FE (4.x, 2.x)

Windows update succeeds on a new OS layer version but reports error C80001FE when a layer with Microsoft Office is booted with the new OS layer version. This may be caused by hiding an update in the OS layer...

Asylo Open-Source Framework Tackles TEEs for Cloud

Asylo, an open-source framework and software development kit SDK for creating applications that run in trusted execution environments TEEs, has launched to tackle the complexity involved in running a confidential computing platform for workloads in the cloud and virtual environments. TEEs provide...

mp3gain Denial of Service Vulnerability

mp3gain is a volume adjustment application for MP3 files. A security vulnerability exists in the 'IIIdequantizesample' function in the mpglibDBL/layer3.c file in mp3gain 1.5.2-r2 and earlier versions, which stems from a read access privilege conflict in the program. A remote attacker could exploi...

Oracle Security Service Component Remote Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. Security Service is one of the security service components. A security vulnerability exists in the...

Cisco Firepower System Transient Denial of Service Vulnerability

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. detection engine is an intrusion detection engine. A cryptographic vulnerability exists in the detection engine in Cisco Firepower System Software, which stems from the program's failure to properly handle the...

Cisco Firepower System Transient Denial of Service Vulnerability (CNVD-2018-09028)

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A cryptographic vulnerability exists in Cisco Firepower System Software, which arises from a failure of the program to properly handle Transport Layer Security TLS extensions when establishing a TLS connection ...

CVE-2018-0281

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort detection engine on an affected device, resulting in a brief denial of service DoS condition. The vulnerability is due to the incorrect...

CVE-2018-0283

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort detection engine on an affected device, resulting in a brief denial of service DoS condition. The vulnerability is due to the incorrect...

CVE-2018-0262

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain unauthorized access to components of, or sensitive information in, an affected system, leading to Remote Code Execution. The vulnerability is due to incorrect default configuration of the device, which...

Cisco Firepower System Software Transport Layer Security Denial of Service Vulnerability

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort detection engine on an affected device, resulting in a brief denial of service DoS condition. The vulnerability is due to the incorrect...

Cisco Meeting Server Remote Code Execution Vulnerability

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain unauthorized access to components of, or sensitive information in, an affected system. The vulnerability is due to incorrect default configuration of the device, which can expose internal interfaces an...

PT-2018-8724 · Cisco · Cisco Firepower System +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower System Software affected versions not specified Description: A vulnerability in the detection engine could allow an unauthenticated, remote attacker to restart an instance of the Snort detection engine on an affected device,...

PT-2018-8725 · Cisco · Cisco Firepower System

Name of the Vulnerable Software and Affected Versions: Cisco Firepower System Software affected versions not specified Description: A flaw in the detection engine could allow an unauthenticated, remote attacker to restart the Snort detection engine, resulting in a brief denial of service DoS...

GitLab: XSS (Persistent) - Selecting role(s) for protected branches

Summary: When using the dropdown that selects the groups or users that are allowed to push or merge to a protected branch within a project, it is possible to trigger a XSS with a malicious user name string. Description: This vulnerability is similar to the recently announced CVE-2018-10379. The...

Nemesis - A Command-Line Network Packet Crafting And Injection Utility

The Nemesis Project is designed to be a command line based, portable human IP stack for UNIX-like and Windows systems. The suite is broken down by protocol, and should allow for useful scripting of injected packets from simple shell scripts. Key Features ARP/RARP, DNS, ETHERNET, ICMP, IGMP, IP,...

ALPINE-CVE-2017-14450

A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...