CVE-2017-10020

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Change Assistant. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...

UBUNTU-CVE-2017-10129

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

UBUNTU-CVE-2017-10204

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

August 8, 2017—KB4034668 (OS Build 10240.17533)

None None...

CVE-2017-9938

A vulnerability was discovered in Siemens SIMATIC Logon All versions before V1.6 that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically...

Denial of service

A vulnerability was discovered in Siemens SIMATIC Logon All versions before V1.6 that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically...

CVE-2017-9938

A vulnerability was discovered in Siemens SIMATIC Logon All versions before V1.6 that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically...

CVE-2017-9938

Siemens SIMATIC Logon (pre-1.6) is vulnerable to an Out-of-Bounds Write (CWE-787) via specially crafted packets to the Remote Access service on TCP 16389, causing a Denial-of-Service (the service restarts automatically). Affected: SIMATIC Logon, all versions prior to V1.6. Impact: DoS with availa...

CVE-2017-9938

A vulnerability was discovered in Siemens SIMATIC Logon All versions before V1.6 that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically...

Move sensitive information out of Synchrony JVM arguments

h3. Issue Running Synchrony as a stand-alone service for data center instances exposes sensitive information such as the database username/password, and public/private keys. These are all passed as JVM arguments. This means anyone with command-line access to the server can see this information vi...

mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Error Handling. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the...

mysql: Server: MyISAM unspecified vulnerability (CPU Jan 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: MyISAM. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure wher...

PVS Image Not Able to Get DHCP Address, Group Policies Not Applying

Event ID 5719 is logged when you start a Domain Member that is a PVS target Event Type: Error Event Source: NETLOGON Event Category: None Event ID: 5719Date: DateTime: TimeUser: N/A Computer: ServerDescription:No Domain Controller is available for domain due to the following: There are currently ...

Hydra 8.6 - Fast and Flexible Network Login Hacker

A very fast network logon cracker which supports many different services. See feature sets and services coverage page - incl. a speed comparison against ncrack and Medusa. Number one of the biggest security holes are passwords, as every password security study shows. This tool is a proof of...

Selfservice.exe Crashes on First Log On, Second Attempt Works

When a user attempts to logon it fails the first time and succeeds the second time. The first time selfservice.exe crashes. Self-service Plug-in exited unexpectedly. Exception was Object reference not set to an instance of an object. at Dazzle.AppMonitor.Control.Controller.WaitForLogoff at...

July 18, 2017—KB4025335 (Preview of Monthly Rollup)

None None...

Siemens SIMATIC Logon Out-of-Bounds Write Denial of Service Vulnerability

SIMATIC Logon is automation software. A security vulnerability in the handling of constructed packets by the Remote Access Service on port 16389/TCP of SIMATIC Logon allows remote attackers to conduct denial-of-service attacks by submitting special requests exploiting the vulnerability...

Legal Robot: Users with 2FA can have multiple sessions

While going live with additional 2FA options, a security researcher discovered that users that had enabled 2FA no longer executed regular logon hooks. Most of Legal Robot's logon hooks have no security impact, but one action logs out other sessions when a new session begins. While there is no...

[SECURITY] Fedora 26 Update: myproxy-6.1.28-1.fc26

MyProxy is open source software for managing X.509 Public Key Infrastructure PKI security credentials certificates and private keys. MyProxy combines an online credential repository with an online certificate authority to allow users to securely obtain credentials when and where need ed. Users ru...

Virtual Apps and Desktops: Logon Duration in MonitorData.Session Table shows "Null"

Logon Duration inMonitorData.Session Table in Monitoring Database shows "Null" value for all sessions and hence Director does not report Average logon Duration for Sessions. Restarting the Monitoring Service on Delivery Controllers does not fix the issue. We used the below scripts to ensure thatO...