F5 Networks BIG-IP : F5 TCP IPv6 vulnerability (K46535047)

The Traffic Management Microkernel TMM in F5 BIG-IP systems before 11.5.4 HF3, 11.6.x before 11.6.1 HF2, and 12.x.x before 12.1.2 do not properly handle minimum path MTU options for IPv6, which allows remote attackers to cause a denial of service DoS through unspecified vectors. CVE-2016-9252 C...

OnePlus OxygenOS Local Security Bypass Vulnerability

The OnePlus 3 and 3T are both smartphones from China's OnePlus Technology OnePlus.OxygenOS is the operating system it comes with. A local security bypass vulnerability exists in OnePlus OxygenOS. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized...

CVE-2017-0107

Microsoft SharePoint Server fails to sanitize crafted web requests, allowing remote attackers to run cross-script in local security context, aka "Microsoft SharePoint XSS Vulnerability."...

March 14, 2017—KB4013429 (OS Build 14393.953)

None None...

HP OfficeConnect Network Switches Local Security Bypass Vulnerability

The HP OfficeConnect 1820 is a switch product from Hewlett-Packard HP in the United States. A local security bypass vulnerability exists in HP OfficeConnect Network Switches. An attacker could exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations...

Riverbed RiOS Local Security Bypass Vulnerability

Riverbed Steelhead are hardware appliances used to optimize and accelerate network traffic. Implemented as TLS endpoints, they have a secure repository that stores the server's private TLS certificates. A local security bypass vulnerability exists in Riverbed RiOS. An attacker could use this...

VMWare Airwatch Inbox for Android Local Security Bypass Vulnerability

VMWare Airwatch Inbox for Android is a suite of email clients for the Android platform from VMware. A security bypass vulnerability exists in VMWare Airwatch Inbox for Android. A local attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the LSASS component in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger a service failure reboot through a specially crafted authentication request...

January 26, 2017—KB 3216755 (OS Build 14393.726)

None None...

Oracle E-Business Suite Local Security Vulnerability

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Oracle E-Business Suite has a local security...

Microsoft Windows LSASS Denial of Service Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Local Security Authority Subsystem Service LSASS is one of the local security authentication subsystem services. A denial of service vulnerability exists in Microsoft Windows LSASS. An attacker can...

CVE-2017-0004

The Local Security Authority Subsystem Service LSASS in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service reboot via a crafted authentication request, aka "Local Security Authority Subsystem Service Denial of...

January 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1

January 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security update resolves the following vulnerabilities in Windows: MS17-004 Security Update for Local Security Authority Subsystem Service 3216771 This security update also includes...

MS17-004: Description of the security update for Local Security Authority Subsystem Service: January 10, 2017

None None...

MS17-004: Security update for Local Security Authority Subsystem Service: January 10, 2017

Resolves a vulnerability in Windows that could allow denial of service by changing the way that LSASS handles specially crafted authentication requests.SummaryA denial of service vulnerability exists in the way that the Local Security Authority Subsystem Service LSASS handles authentication...

MS17-004: Security Update for Local Security Authority Subsystem Service (3216771)

The remote Windows host is missing a security update. It is, therefore, affected by a denial of service vulnerability in the Local Security Authority Subsystem Service LSASS component due to improper handling of authentication requests. An unauthenticated, remote attacker can exploit this to...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the LSASS service in the Windows operating system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure system shutdown through a specially crafted request...

McAfee Application Control and Endpoint Security Security Bypass Vulnerability

McAfee Application Control MAC and Endpoint Security are both products of the U.S. company McAfee McAfee. The former is a set of program control software, the latter is a set of endpoint security software to provide intelligent threat defense. MAC and Endpoint Security have a local security bypas...

Symantec Norton App Lock Local Security Bypass Vulnerability

Norton App Lock is a series of security products under Symantec. A local security bypass vulnerability exists in Symantec Norton App Lock. A local attacker could use this issue to bypass certain security restrictions in order to perform unauthorized operations. This could facilitate further attac...

SIEMENS SICAM PAS Local Security Bypass Vulnerability

SICAM PAS is an energy automation solution for the operation of substation equipment. It has open communication interfaces for power system control and control of industrial power supply equipment. A local security bypass vulnerability exists in SIEMENS SICAM PAS. An authenticated local attacker...