CVE-2014-8426

Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015...

CVE-2014-8428

Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key...

Privilege escalation

Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key...

CVE-2014-8426

Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015...

CVE-2014-8428

Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key...

CVE-2014-8426

CVE-2014-8426 affects Barracuda Load Balancer ADC with firmware 5.0.0.015, where hard-coded weak credentials are present. Connected sources describe a hard-coded credential issue and related weaknesses (including SSH key issues and offline password-reset vectors) that could enable unauthorized ac...

CVE-2014-8428

CVE-2014-8428 affects Barracuda Load Balancer 5.0.0.015, causing privilege escalation via an improperly protected SSH key. Multiple sources (NVD entry and CNVD/PRION records) corroborate a vulnerability in Barracuda Load Balancer with this issue, noting the SSH key protection flaw as the root cau...

PT-2017-6237

Name of the Vulnerable Software and Affected Versions Barracuda Load Balancer version 5.0.0.015 Description The issue concerns hard-coded weak credentials. Recommendations For version 5.0.0.015, update the credentials to strong, unique ones to prevent unauthorized access...

CVE-2014-8428: Undefined Security Weakness

Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key...

CVE-2014-8426: Use of Hard-coded Credentials

Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015...

PT-2017-6238

Name of the Vulnerable Software and Affected Versions Barracuda Load Balancer version 5.0.0.015 Description A privilege escalation issue exists due to an improperly protected SSH key. Recommendations For Barracuda Load Balancer version 5.0.0.015, update the SSH key protection mechanism to prevent...

Installer of "Flets Setsuzoku Tool" may insecurely load Dynamic Link Libraries

Overview Installer of "Flets Setsuzoku Tool"provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC...

BSA-2017-376

Security Advisory ID : BSA-2017-376 Component : Apache HTTPD Revision : 3.0: Final When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behavior...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25062)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial of service vulnerability exists in the 'loadlevel' function of the ImageMagick coders/xcf.c file, which allows remote attackers to exploit the vulnerability to construct malicious...

Fedora 25 : python-tablib (2017-fe04b06b64)

Latest upstream, including the yaml.safeload fix for CVE-2017-2810. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

DEBIAN-CVE-2017-13133

In ImageMagick 7.0.6-8, the loadlevel function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service loadtile memory exhaustion via a crafted file...

PT-2017-4220

Name of the Vulnerable Software and Affected Versions LibRaw version 0.18.2 Description The issue is related to insufficient input validation in the kodak radc load raw function of the dcraw common.cpp component in the LibRaw image processing library. This can be exploited by a remote attacker...

HTTP Load Generator: hey

hey is a tiny program that sends some load to a web application – ApacheBench ab replacement. hey was originally called boom and was influenced from Tarek Ziade’s tool at tarekziade/boom . Installation go get -u github.com/rakyll/hey Note: Requires go 1.7 or greater. Usage hey runs provided numbe...

How to Use Variables in Configuration Jobs on NetScaler MAS

A configuration job is a set of configuration commands that you can execute on one or more managed instances. When you execute the same configuration on multiple instances, you might want to use different values for the parameters used in your configuration. You can define variables that enable y...

Installer of Baidu IME may insecurely load Dynamic Link Libraries

Overview Installer of Baidu IME contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...