4134 matches found
Authentication flaw
In MIT Kerberos 5 aka krb5 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests...
CVE-2017-11368
In MIT Kerberos 5 aka krb5 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests...
CVE-2017-11368
In MIT Kerberos 5 aka krb5 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests...
CVE-2017-11368
In MIT Kerberos 5 aka krb5 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests...
CVE-2017-11368
MIT Kerberos krb5 (krb5kdc) is affected by CVE-2017-11368: an authenticated attacker can cause a KDC assertion failure (denial of service) by sending invalid S4U2Self or S4U2Proxy requests. The issue is documented across multiple advisories (Arch, CentOS/Red Hat, and ALAS) with remediation involv...
CVE-2017-11368
In MIT Kerberos 5 aka krb5 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests...
CVE-2017-11368: Reachable Assertion
In MIT Kerberos 5 aka krb5 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests...
PT-2017-11963
Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 aka krb5 versions 1.7 and later Description The issue allows an authenticated attacker to cause a KDC assertion failure. This can be achieved by sending invalid S4U2Self or S4U2Proxy requests. Recommendations For versions 1.7 an...
executive.mit.edu XSS vulnerability
Open Bug Bounty ID: OBB-275073 Description| Value ---|--- Affected Website:| executive.mit.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ist.mit.edu XSS vulnerability
Vulnerable URL: http://ist.mit.edu/?q=user/password/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check ist.mit.edu SSL...
Aile TV - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Aile TV published at the 'play' market has multiple vulnerabilities...
[SECURITY] Fedora 26 Update: mingw-c-ares-1.13.0-1.fc26
c-ares is a C library that performs DNS requests and name resolves asynchronously. c-ares is a fork of the library named 'ares', written by Greg Hudson at MIT...
Sphero Edu - Coding for Sphero Robots - Customized SSL, MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Sphero Edu - Coding for Sphero Robots published at the 'play' market has multiple vulnerabilities...
Barwa Banking Application - BSD license, Customized SSL, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Barwa Banking Application published at the 'play' market has multiple vulnerabilities...
Sberbank Mobile Banking - Customized SSL, MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Sberbank Mobile Banking published at the 'play' market has multiple vulnerabilities...
cisr.mit.edu XSS vulnerability
Vulnerable URL: http://cisr.mit.edu/search/?query=1%22%27--!%3E%3CScript%20/K/%3Econfirm/OPENBUGBOUNTY/%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
Ubuntu: Security Advisory (USN-3362-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-3362-1: X.Org X server vulnerabilities
It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to crash the server, or possibly execute arbitrary code as an administrator. CVE-2017-10971 It was...
USN-3362-1 xorg-server, xorg-server-hwe-16.04, xorg-server-lts-xenial vulnerabilities
It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to crash the server, or possibly execute arbitrary code as an administrator. CVE-2017-10971 It was...
Girls Who Code Week 2: Let the Coding Begin!!
The Akamai-sponsored Girls Who Code program is well under way! Week 2 featured lots of activity in the Girls Who Code classroom at Akamai's Cambridge, MA headquarters. The girls learned to use Scratch, a visual programming language that was developed at MIT to help people learn to code. They used...