Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that 1 restore factory settings or 2 reboot the device via unspecified vectors...

CVE-2016-6158

Multiple cross-site request forgery CSRF vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that 1 restore factory settings or 2 reboot the device via unspecified vectors...

CVE-2016-6158

CVE-2016-6158 concerns Huawei WS331a routers running software before WS331a-10 V100R001C01B112. The vulnerability is a Cross-Site Request Forgery (CSRF) in the management interface that lets an unauthenticated attacker cause actions like restoring factory settings or rebooting the device by issui...

Multiple Huawei Switches Remote Denial of Service Vulnerabilities

The Huawei S7700, S9300, S9700, and S12700 are intelligent routing switches from Huawei, a Chinese company. A remote denial of service vulnerability exists in multiple Huawei Switches. A remote attacker can exploit this vulnerability by sending a large number of malicious packets to cause a denia...

StoreFront 2.5 not loading apps

Storefront URL when logging in doesn't load any applications and just comes up after logging in with "Spinning wheel" Issue is fixed by rebooting the Storefront servers every time it happens. Also sometimes "Cannot complete you request" error comes after login...

Null pointer dereference

arm-wt-22k/libsrc/easmdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows remote attackers to cause a denial of service NULL pointer dereference, and device hang or reboot via a crafted media file, aka internal bug 29770686...

Security Advisory - Two Vulnerabilities in Huawei WS331a

Huawei WS331a is a Mini Wireless route. There is a Cross-site request forgery CSRF vulnerability in the management interface of WS331a products, an unauthenticated attacker could exploit this vulnerability to perform a CSRF attack. Successful exploit could allow the attacker to submit special...

Medium: kernel

Issue Overview: A use after free vulnerability was found in tcpxmitretransmitqueue and other tcp functions. Affected Packages: kernel Issue Correction: Run yum update kernel or yum update --advisory ALAS-2016-740 to update your system. New Packages: i686: kernel-devel-4.4.19-29.55.amzn1.i686...

Error: "Failed, curl response = Couldn't connect to server. Could not connect to database"

After rebooting the XenMobile Server or configuring database, we see the error on CLI: "Failed, curl response = couldn't connect to server. Could not connect to database"...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2016-06549)

Huawei Access Controllers AC6003 and others are wireless access controllers from Huawei, China. A denial of service vulnerability exists in multiple Huawei products. An attacker can exploit this vulnerability by sending specially crafted packets to cause a denial of service device reboot...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the codecs/aacdec/SoftAAC2.cpp method in the libstagefright library of the Android operating system’s media server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruption...

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor, who operates remotely and has completed the authentication process, to trigger a service failure device reboot or execute...

CVE-2016-3830

codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service device hang or reboot via crafted ADTS data, aka internal bug 29153599...

CVE-2016-3828

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28835995...

CVE-2016-3827

codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28816956...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-06128)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. An attacker can exploit this vulnerability to cause a device to...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-06129)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. An attacker can exploit this vulnerability to cause a device to...

Release Notes for Veeam Backup & Replication 9.0 Update 2

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.0 Update 2 Cause Please confirm you are running version 9.0.0.902 or 9.0.0.1491 prior to installing this updat...

Palo Alto Networks PAN-OS Privilege Acquisition Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A privilege acquisition vulnerability exists in Palo Alto Networks PAN-OS. A local attacker can exploit this vulnerability to gain privileges by filtering rootreboot calls incorrect...

Android Mediaserver Denial of Service Vulnerability (CNVD-2016-06012)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. The vulnerability can be exploited to cause a device to hang or...