3722 matches found
Linux kernel net/xfrm/xfrm_policy.c file denial of service vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the net/xfrm/xfrmpolicy.c file in Linux kernel version 4.12.3 and earlier, which stems from the program failing to detect the dir value of...
OSPF Protocol MaxAge LSA Denial of Service Vulnerability in Multiple Huawei Products
AC6005 is a wireless access controller AC AccessController from Huawei Technologies Co. the AR1200 and AR3200 are router products. the AR207 is the base model in Huawei's AR200 series of enterprise routers. A denial of service vulnerability exists in the MaxAge LSA in the OSPF protocol of multipl...
PT-2018-6780
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.11 Description: The issue is related to the perf cpu time max percent handler function in the Linux kernel, which can cause a denial of service due to an integer overflow when a large value is provided. This m...
Authentication Bypass Vulnerability in Multiple WiMAX Routers
WiMAX Worldwide Interoperability for Microwave Access, a communications technology based on the IEEE-802.16 standard, is an alternative to wired broadband services. An authentication bypass vulnerability exists in several WiMAX routers that use a customized httpd plug-in for libmtk MediaTek SDK...
Opera Max - Data manager - BSD license, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Opera Max - Data manager published at the 'play' market has multiple vulnerabilities...
JVN#70411623: WordPress plugin "MaxButtons" vulnerable to cross-site scripting
The WordPress plugin "MaxButtons" provided by Max Foundry contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the logged in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the developer...
CVE-2017-8906
An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...
Large cookie Max-Age values can cause a denial of service
Affected versions of this crate use the time crate and the method Duration::seconds to parse the Max-Age duration cookie setting. This method will panic if the value is greater than 2^64/1000 and less than or equal to 2^64, which can result in denial of service for a client or server. This flaw w...
RUSTSEC-2017-0005 Large cookie Max-Age values can cause a denial of service
Affected versions of this crate use the time crate and the method Duration::seconds to parse the Max-Age duration cookie setting. This method will panic if the value is greater than 2^64/1000 and less than or equal to 2^64, which can result in denial of service for a client or server. This flaw w...
PT-2017-15156
Name of the Vulnerable Software and Affected Versions cookie crate versions prior to 0.7.6 Description The issue arises when large integers are used in the Max-Age of a cookie, causing a panic. This occurs because affected versions of the crate use the time crate and the Duration::seconds method ...
Advantech B+B SmartWorx MESR901
CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Advantech B+B SmartWorx Equipment: MESR901 Vulnerability: Use of Client-Side Authentication AFFECTED PRODUCTS The following versions of MESR901, a Modbus gateway, are affected: MESR901 firmware versions 1.5.2 and prio...
Canlı TV Max Pro - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Canlı TV Max Pro published at the 'play' market has multiple vulnerabilities...
Rockstar Games: XSS on rockstargames.com
Vulnerability description not provided...
Lifepark-Max - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Lifepark-Max published at the 'play' market has multiple vulnerabilities...
Denial Of Service (DoS)
netty-codec-http is vulnerable to denial of service DoS attacks. These attacks are possible because it does not respect the limit on max http header size. This is caused because control characters are indefinitely skipped and the parsing never ends...
VMSA-2016-0021:VMware product updates address partial information disclosure vulnerability
VMSA-2016-0021 VMware product updates address partial information disclosure vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0021 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: VMware product updates address partial informatio...
Waves Audio Service Privilege Escalation
Waves Audio Service: http://www.maxx.com By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path Privilege Escalation Max audio drivers dell default ones installs as a service with an...
Waves Audio Service - Unquoted Service Path Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits Waves Audio Service: http://www.maxx.com By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path Privilege Escalation Max audio...
Service worker meeting notes
On July 28th-29th we met up in the Mozilla offices in Toronto to discuss the core service worker spec. I'll try and cover the headlines here. Before I get stuck in to the meaty bits of the meeting, our intent here is to do what's best for developers and the future of the web, so if you disagree...
