Authentication flaw

IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 124685...

Vulnerability Spotlight: Dell Precision Optimizer and Invincea Vulnerabilities

Vulnerabilities discovered by Marcin ‘Icewall’ Noga of Cisco Talos.OverviewTalos are releasing advisories for vulnerabilities in the Dell Precision Optimizer application service software, Invincea-X and Invincea Dell Protected Workspace. These packages are pre-installed on certain Dell systems...

Information disclosure

An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Sensitive information is insufficiently protected during transmission and vulnerable to sniffing, which could lead to...

CVE-2017-6046

An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Sensitive information is insufficiently protected during transmission and vulnerable to sniffing, which could lead to...

CVE-2017-6046

CVE-2017-6046 affects Sierra Wireless AirLink Raven XE (all versions before 4.0.14) and Raven XT (all versions before 4.0.11). Root cause: Insufficiently protected credentials during transmission, leading to potential information disclosure via sniffing. Impact per sources: confidentiality loss (...

CVE-2017-6028

Schneider Electric Modicon PLCs Modicon M241 (all firmware) and M251 (all firmware) are affected by CVE-2017-6028, where login credentials are transmitted over the network using Base64, enabling sniffing and potential unauthorized web access. No exploits are publicly known in the provided docs. R...

The vulnerability of the RPMB process in the Android operating system allows a hacker to bypass certificate verification.

The vulnerability of the RPMB process in the Android operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification...

The vulnerability of the Android operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

Invincea Dell Protected Workspace Protection Bypass

Summary Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303. Weak restrictions on the driver communication channel and additonal insufficient checks allow any application to turn off some of the protection mechanisms provided by the...

Invincea-X SboxDrv.sys Version Number Query Local Privilege Escalation Vulnerability

Summary An exploitable double fetch vulnerability exists in the SboxDrv.sys driver functionality of Invincea-X 6.1.3-24058. A specially crafted input buffer and race condition can result in kernel memory corruption, which could result in privilege escalation. An attacker needs to execute a specia...

Unspecified Vulnerability in Mozilla Firefox and Firefox ESR for Windows (CNVD-2017-12555)

Mozilla Firefox for Windows is an open source web browser for the Windows platform from the Mozilla Foundation in the U.S. Firefox ESR for Windows is an extended support version of Firefox for the Windows platform. A security vulnerability exists in Mozilla Firefox versions prior to 54 and Firefo...

BSA-2017-342

Security Advisory ID : BSA-2017-342 Component : Freeradius Revision : 2.0: Interim The TLS session cache inFreeRADIUS2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remo...

Microsoft Extends Edge Bug Bounty Program Indefinitely

Microsoft said Wednesday it would no longer impose a time limit for its Edge bug bounty program. The Redmond, Wash. based company announced the Edge on Windows Insider Preview WIP program in August 2016 as a means to incentivize researchers to find and report vulnerabilities in the browser...

HP SiteScope Multiple Vulnerabilities

HP SiteScope is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:hp:sitescope"; ifdescription...

Serviio PRO DLNA Media Streaming Server - REST API Arbitrary Password Change Vulnerability

Serviio PRO is a DLNA media server. An arbitrary password change vulnerability exists in the Serviio PRO DLNA Media Streaming Server - REST API. A remote attacker can exploit this to change the login password of a protected page via a specially crafted request...

Google Android is vulnerable

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There is a security vulnerability in Android. An attacker can exploit the vulnerability to overwrite dynamically protected DDR regions...

Vulnerability in the Core Kernel of the Android operating system, allowing a intruder to gain access to protected information

The vulnerability in the Core Kernel of the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

The vulnerability of the Secure File System (SFS), a secure file system in the Android operating system, allows a perpetrator to gain access to protected information and manage resources.

The vulnerability of the secure file system SFS in the Android operating system arises due to numerical overflow or cyclic shift. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information, manage resources, or execute programs...

Vulnerability in the Core Kernel of the Android operating system, allowing a intruder to gain access to protected information

The vulnerability in the Core Kernel of the Android operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

The vulnerability of the WCDMA component of the Android operating system, which allows a hacker to gain access to protected information

The vulnerability of the WCDMA component of the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...