10095 matches found
CCN-lite Integer Overflow Vulnerability
CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. An integer overflow vulnerability exists in the ndnparsesequence function in CCN-lite versions prior to 2.0.0. An attacker can exploit this vulnerability to cause an integer overflow via...
CCN-lite Denial of Service Vulnerability
CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. A denial of service vulnerability exists in ccn-lite-valid.c in versions of CCN-lite prior to 2.0.0. An attacker can exploit this vulnerability to cause a denial of service null pointer...
CCN-lite Type Obfuscation Vulnerability
CCN-lite is a lightweight CCNx Content Centric Networking Protocol implementation of the CCN-lite project. A type confusion vulnerability exists in CCN-lite version 2. An attacker could exploit this vulnerability to cause a memory access conflict...
FTC Warns of Online Dating Scams
The Federal Trade Commission FTC has released an article addressing scams targeting online daters. In this type of fraud, cyber criminals target victims, gain their confidence, and trick them into sending money. To stay safer online, review the FTC article on Online Dating Scams and the...
CVE-2014-4705
Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and AC...
Design/Logic Flaw
A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance ESA and Content Security Management Appliance SMA could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential wi...
CVE-2018-0095
A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance ESA and Content Security Management Appliance SMA could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential wi...
CVE-2018-0095
A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance ESA and Content Security Management Appliance SMA could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential wi...
CVE-2018-0095
A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance ESA and Content Security Management Appliance SMA could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential wi...
CVE-2018-0095
A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance ESA and Content Security Management Appliance SMA could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential wi...
The vulnerability of VMware NAT hypervisors in VMware Workstation and VMware Fusion allows a hacker to execute arbitrary code on the host operating system.
The vulnerability of the VMware NAT service vmnat.exe in VMware Workstation and VMware Fusion stems from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating locally on the guest operating system, to execute arbitrary code on the...
Cisco Email Security and Content Security Management Appliance Privilege Escalation Vulnerability
A vulnerability in the administrative shell of the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a...
Lenovo Patches Networking OS Vulnerability Dating Back to 2004
Lenovo patched a flaw in its networking operating system dating back to 2004 that allowed attackers to perform an authentication bypass attack via a mechanism called âHP Backdoor.â If exploited, an attacker could gain admin-level access on affected switches, Lenovo said. The vulnerability is rate...
Lenovo removes backdoor present in networking switches since 2004
By Waqas Engineers at Chinese firm Lenovo have identified a backdoor in This is a post from HackRead.com Read the original post: Lenovo removes backdoor present in networking switches since 2004...
Lenovo, IBM RackSwitch and BladeCenter Switch Enterprise Networking Operating System Authentication Bypass Vulnerability
Lenovo RackSwitch and BladeCenter are switches from Lenovo in China.IBM RackSwitch and BladeCenter are switches from IBM in the U.S. Enterprise Networking Operating System ENOS is a set of enterprise networking operating systems that run on them. Enterprise Networking Operating System ENOS is a s...
HPSBPI03574 rev. 2 - WPA, WPA2 Key Reinstallation Attacks (KRACK attacks) Potential Remote Disclosure of Information: Certain HP Enterprise Printer and MFP products, Certain HP PageWide Printer and MFP Products, HP Jetdirect Accessory Products
Potential Security Impact Remote disclosure of information. Source:Mathy Vanhoef of imec-DistriNet, KU Leuven VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP Printers and MFPs, and HP JetDirect Networking accessories using WPA or WPA2. This vulnerabili...
CVE-2017-3765
In Enterprise Networking Operating System ENOS in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when...
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2018-14)
This update for java-170-openjdk fixes the following issues : Security issues fixed : - CVE-2017-10356: Fix issue inside subcomponent Security bsc1064084. - CVE-2017-10274: Fix issue inside subcomponent Smart Card IO bsc1064071. - CVE-2017-10281: Fix issue inside subcomponent Serialization...
Security update for java-1_7_0-openjdk (important)
This update for java-170-openjdk fixes the following issues: Security issues fixed: - CVE-2017-10356: Fix issue inside subcomponent Security bsc1064084. - CVE-2017-10274: Fix issue inside subcomponent Smart Card IO bsc1064071. - CVE-2017-10281: Fix issue inside subcomponent Serialization...
