IBM Spectrum Protect File Read Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from U.S.-based IBM that provides organizations with a single point of control and management, and support for backup and recovery of virtual, physical and cloud environments of all sizes. A...

SUSE-SU-2016:0481-1 Security update for dhcp

This update for dhcp fixes the following issues: - CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally bsc961305 The following bugs were fixed: - bsc936923: Improper...

UBUNTU-CVE-2015-7577

activerecord/lib/activerecord/nestedattributes.rb in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly implement a certain destroy option, which allows remote attackers to bypass...

CVE-2015-7408

The server in IBM Spectrum Protect aka Tivoli Storage Manager 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy authority...

CVE-2016-2048

Django 1.9.x before 1.9.2, when ModelAdmin.saveas is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission...

Design/Logic Flaw

Cisco Nexus 9000 Application Centric Infrastructure ACI Mode switches with software before 11.01c allow remote attackers to cause a denial of service device reload via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512...

FreeBSD TCP Link Handling TCP_MD5SIG / TCP_NOOPT Socket Option Denial of Service Vulnerability

FreeBSD is a Unix-like operating system. An error in FreeBSD's handling of TCP connections with the TCPMD5SIG and TCPNOOPT socket options allows a local attacker to conduct denial-of-service attacks by exploiting this vulnerability...

OpenSSH client Information Leak & Buffer Overflow

Since version 5.4 released on March 8, 2010, the OpenSSH client supports an undocumented feature called roaming: if the connection to an SSH server breaks unexpectedly, and if the server supports roaming as well, the client is able to reconnect to the server and resume the suspended SSH session...

FreeBSD-SA-16:02.ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:02.ntp Security Advisory The FreeBSD Project Topic: ntp panic threshold bypass vulnerability Category: contrib Module: ntp Announced: 2016-01-14 Credits:...

bellinghamnightout.com XSS vulnerability

Vulnerable URL: http://www.BellinghamNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 08:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16629372...

portsmouthnightout.com XSS vulnerability

Vulnerable URL: http://www.PortsmouthNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 08:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

sanangelonightout.com XSS vulnerability

Vulnerable URL: http://www.SanAngeloNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 08:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15246652...

readingnightout.com XSS vulnerability

Vulnerable URL: http://www.ReadingNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 08:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12085064...

fayettevillenightout.com XSS vulnerability

Vulnerable URL: http://www.FayettevilleNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 07:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

mariettanightout.com XSS vulnerability

Vulnerable URL: http://www.MariettaNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 07:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

Wireshark NLM Parser Double Release Vulnerability

Wireshark is the most popular network protocol parser. A double-release vulnerability exists in epan/dissectors/packet-nlm.c in the Wireshark NLM parser, which can be exploited by a remote attacker to cause a denial of service application crash via a constructed packet with the "Match MSG/RES...

DEBIAN-CVE-2015-8719

The dissectdnsanswer function in epan/dissectors/packet-dns.c in the DNS dissector in Wireshark 1.12.x before 1.12.9 mishandles the EDNS0 Client Subnet option, which allows remote attackers to cause a denial of service application crash via a crafted packet...

UBUNTU-CVE-2015-8718

Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Match MSG/RES packets for async NLM" option is enabled, allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8838

ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152...

UBUNTU-CVE-2015-8838

ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152...