10337 matches found
Design/Logic Flaw
QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...
CVE-2018-0005 Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.
QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...
PT-2018-8558
Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 14.1X53-D40 Junos OS versions prior to 15.1X53-D55 Junos OS versions prior to 15.1R7 Description: A issue in QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded can cause the...
CVE-2018-0005: Improper Check for Unusual or Exceptional Conditions
QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...
PT-2018-16863
Name of the Vulnerable Software and Affected Versions Kentico versions 9.0 through 11.0 Description The issue is related to a stack-based buffer overflow that can occur via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML document. However, the vendor disputes th...
Shanghai Shenglang Information Consulting Co., Ltd. Chatterbox APP has arbitrary number login vulnerability
Chatterbox is a location-based mobile video social app. Shanghai Shenglang Information Consulting Co., Ltd. Chatty Guest APP exists arbitrary number login vulnerability, the vulnerability is due to the server failed to verify the authentication code request number of times and time to do the limi...
Kindred Group: Full Account Takeover on *.unibet.com due to crossdomain.xml and AkamaiPlayer loaderContext
==Below is the original, partially-redacted report== --------- Hi, The core issue here are two things: 1. The too wide crossdomain.xml located at: https://payment.unibet.com/crossdomain.xml https://se.unibet.com/crossdomain.xml https://www.unibet.com/crossdomain.xml 2. Issues with not-in-scope...
CVE-2017-17837
The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection leak in the windowId handling. The default size of the windowId get's cut off after 10 characters by default, so the impact might be limited. A fix got applied and released in Apache deltaspike-1.8.1...
Updated apache packages fix security vulnerability
modsessioncrypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation AES256-CBC by default, hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC CVE-2016-0736...
DEBIAN-CVE-2017-17915
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...
CVE-2017-17915
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...
CVE-2017-17915
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...
CVE-2017-17915
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...
Microsoft Windows jscript!NameTbl::GetValDef Use-After-Free Exploit
Exploit for windows platform in category dos / poc Windows: use-after-free in jscript!NameTbl::GetValDef CVE-2017-11903 There is a use-after-free vulnerability in jscript.dll. This issue could potentially be exploited through multiple vectors: - An attacker on the local network could exploit this...
httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed)
A use-after-free flaw was found in the way httpd handled invalid and previously unregistered HTTP methods specified in the Limit directive used in an .htaccess file. A remote attacker could possibly use this flaw to disclose portions of the server memory, or cause httpd child process to crash...
httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed)
A use-after-free flaw was found in the way httpd handled invalid and previously unregistered HTTP methods specified in the Limit directive used in an .htaccess file. A remote attacker could possibly use this flaw to disclose portions of the server memory, or cause httpd child process to crash...
httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed)
A use-after-free flaw was found in the way httpd handled invalid and previously unregistered HTTP methods specified in the Limit directive used in an .htaccess file. A remote attacker could possibly use this flaw to disclose portions of the server memory, or cause httpd child process to crash...
Secure Mail - Not able to send emails with attachments more than 8MB
Unable to send email with attachments more than 8 MB...
Upload Failed due to an Internal Error - When Upgrade SD-WAN Center 9.0.0
When a customer attempts to upgrade their SD-WAN Center from 9.0.0 to versions 9.1.0 or above, they face the below error message in the GUI: Customer can also see the below error message in their browsers: Warning: POST Content-Length of 76632859 bytes exceeds the limit of 62914560 bytes in Unkno...
