CVE-2015-6618

Bluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows user-assisted remote attackers to execute arbitrary code by leveraging access to the local physical environment, aka internal bug 24595992...

[SECURITY] [DLA 360-1] linux-2.6 security update

Package : linux-2.6 Version : 2.6.32-48squeeze17 CVE ID : CVE-2013-7446 CVE-2015-7799 CVE-2015-7833 CVE-2015-7990 CVE-2015-8324 This update fixes the CVEs described below. CVE-2013-7446 Dmitry Vyukov discovered that a particular sequence of valid...

DLA-360-1 linux-2.6 - security update

Bulletin has no description...

多款Huawei路由器信息泄露漏洞

Summary The CF cards on some Huawei switches and ARs contain some sensitive information in plaintext. Once an attacker gets such a CF card, it may result in the leak of sensitive information HWPSIRT-2015-07048. This vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID:...

CVE-2015-7496

GNOME Display Manager gdm before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key...

CVE-2015-7496

GNOME Display Manager gdm before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key...

Code injection

GNOME Display Manager gdm before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key...

Design/Logic Flaw

The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux RHEL 7, when used on UEFI systems, allows local users to bypass intended Secure Boot restrictions and execute non-verified code via a crafted 1 multiboot or 2 multiboot2 module in the configuration file or physically proximate attacke...

Cisco IOS Tunnel Interfaces Security Bypass

The remote Cisco device is affected by a security bypass vulnerability due to physical-interface ACLs superseding tunnel-interface ACLs. An authenticated, remote attacker connected to a tunnel interface can exploit this to bypass intended network-traffic restrictions. C Tenable Network Security,...

Cisco Firepower 9000 USB Kernel Denial of Service Vulnerability

A vulnerability in the USB driver of Cisco Firepower 9000 could allow an unauthenticated, local attacker with physical access to the device to send invalid USB commands to the kernel and cause a denial of service DoS condition. The vulnerability is due to insufficient sanitization of USB input...

Cisco IOS Virtual PPP ACL Control Bypass Vulnerability

Cisco IOS is a popular Internet operating system. Cisco IOS has a security vulnerability that allows a remote authenticated user who can connect to a virtual PPP interface to bypass the ACL on the virtual PPP interface and gain unauthorized access if the ACL on the physical interface allows...

Cisco IOS ACL Control Bypass Vulnerability

Cisco IOS is a popular Internet operating system. Cisco IOS has a security vulnerability that allows remote users who can connect to the channel interface to bypass the ACL controls if the physical interface ACLs allow communication to pass...

Design/Logic Flaw

Cisco IOS 15.204M and 15.403M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303...

Cisco IOS Software Virtual PPP Interfaces Security Bypass Vulnerability

A vulnerability in Cisco devices that are running Cisco IOS Software Release 15.204M or Cisco IOS Software Release 15.403M and are configured to use access control lists ACLs could allow a user who is connected to an authenticated PPP session to bypass ACLs that are configured on virtual PPP...

Cisco IOS Software Tunnel Interfaces Security Bypass Vulnerability

A vulnerability in Cisco devices running IOS Software versions 15.204M6 and 15.403S configured with access control lists ACLs could allow an unauthenticated, remote user connected to a tunnel interface to bypass configured ACLs on tunnel interfaces if the ACL on the physical interface permits the...

FreeBSD : xen-kernel -- Long latency populate-on-demand operation is not preemptible (83350009-881e-11e5-ab94-002590263bf5)

The Xen Project reports : When running an HVM domain in Populate-on-Demand mode, Xen would sometimes search the domain for memory to reclaim, in response to demands for population of other pages in the same domain. This search runs without preemption. The guest can, by suitable arrangement of its...

DEBIAN-CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

xen-kernel -- CPU lockup during exception delivery

The Xen Project reports: A malicious HVM guest administrator can cause a denial of service. Specifically, prevent use of a physical CPU for a significant, perhaps indefinite period. If a host watchdog Xen or dom0 is in use, this can lead to a watchdog timeout and consequently a reboot of the host...

MS15-122: Description of the security update for Windows Kerberos: November 10, 2015

None None...

Ubuntu: Security Advisory (USN-2789-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...