CVE-2015-7408

The server in IBM Spectrum Protect aka Tivoli Storage Manager 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy authority...

CVE-2016-2048

Django 1.9.x before 1.9.2, when ModelAdmin.saveas is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission...

Design/Logic Flaw

Cisco Nexus 9000 Application Centric Infrastructure ACI Mode switches with software before 11.01c allow remote attackers to cause a denial of service device reload via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512...

FreeBSD TCP Link Handling TCP_MD5SIG / TCP_NOOPT Socket Option Denial of Service Vulnerability

FreeBSD is a Unix-like operating system. An error in FreeBSD's handling of TCP connections with the TCPMD5SIG and TCPNOOPT socket options allows a local attacker to conduct denial-of-service attacks by exploiting this vulnerability...

OpenSSH client Information Leak & Buffer Overflow

Since version 5.4 released on March 8, 2010, the OpenSSH client supports an undocumented feature called roaming: if the connection to an SSH server breaks unexpectedly, and if the server supports roaming as well, the client is able to reconnect to the server and resume the suspended SSH session...

FreeBSD-SA-16:02.ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:02.ntp Security Advisory The FreeBSD Project Topic: ntp panic threshold bypass vulnerability Category: contrib Module: ntp Announced: 2016-01-14 Credits:...

bellinghamnightout.com XSS vulnerability

Vulnerable URL: http://www.BellinghamNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 08:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16629372...

portsmouthnightout.com XSS vulnerability

Vulnerable URL: http://www.PortsmouthNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 08:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

sanangelonightout.com XSS vulnerability

Vulnerable URL: http://www.SanAngeloNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 08:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15246652...

readingnightout.com XSS vulnerability

Vulnerable URL: http://www.ReadingNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 08:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12085064...

fayettevillenightout.com XSS vulnerability

Vulnerable URL: http://www.FayettevilleNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 07:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

mariettanightout.com XSS vulnerability

Vulnerable URL: http://www.MariettaNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 07:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

Wireshark NLM Parser Double Release Vulnerability

Wireshark is the most popular network protocol parser. A double-release vulnerability exists in epan/dissectors/packet-nlm.c in the Wireshark NLM parser, which can be exploited by a remote attacker to cause a denial of service application crash via a constructed packet with the "Match MSG/RES...

DEBIAN-CVE-2015-8719

The dissectdnsanswer function in epan/dissectors/packet-dns.c in the DNS dissector in Wireshark 1.12.x before 1.12.9 mishandles the EDNS0 Client Subnet option, which allows remote attackers to cause a denial of service application crash via a crafted packet...

UBUNTU-CVE-2015-8718

Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Match MSG/RES packets for async NLM" option is enabled, allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8838

ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152...

UBUNTU-CVE-2015-8838

ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152...

Scientific Linux Security Update : NetworkManager on SL7.x x86_64 (20151119)

It was discovered that NetworkManager would set device MTUs based on MTU values received in IPv6 RAs Router Advertisements, without sanity checking the MTU value first. A remote attacker could exploit this flaw to create a denial of service attack, by sending a specially crafted IPv6 RA packet to...

CVE-2015-8393

pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client...

CVE-2015-8393

CVE-2015-8393: pcregrep in PCRE before 8.38 mishandles the -q option for binary files, potentially exposing sensitive information. In the connected IBM bulletin for Db2 Big SQL, this CVE is listed among multiple PCRE-related flaws; affected product line is IBM Big SQL on IBM Cloud Pak for Data. R...