Moodle 2.0.x < 2.0.10 Multiple Vulnerabilities

Binary data 9403.prm...

The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability in the ssl/s3clnt.c function of the OpenSSL library arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to trigger a service denial game-of-thrones behavior and subsequent release by using a specially created...

CVE-2016-4979

A flaw was found in the way httpd performed client authentication using X.509 client certificates. When the HTTP/2 protocol was enabled, a remote attacker could use this flaw to access resources protected by certificate authentication without providing a valid client certificate...

The vulnerability of Samba software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability exists in Samba when operating as an Active Directory domain controller due to the fact that all users have permission to write to non-standard CIFS network resources. Exploiting this vulnerability allows remote users who have been authenticated to view, modify, create, and dele...

The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure or increase their privileges.

The Linux operating system contains a vulnerability related to errors in implementing access to shared resources. Exploiting this vulnerability allows for denial of service or increases privileges by creating special requests to the shared resources...

Wireshark 1.12.x < 1.12.12 Multiple DoS

The version of Wireshark installed on the remote Windows host is 1.12.x prior to 1.12.12. It is, therefore, affected by multiple denial of service vulnerabilities : - An infinite loop exists in the SPOOLs dissector. A remote attacker, via a specially crafted packet or trace file, can exploit this...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of the extensions/renderer/resources/binding.js component in Google Chrome’s browser-based bindings extensions is related to the improper use of prototypes. Exploiting this vulnerability could allow a malicious actor to bypass existing access control policies...

Microsoft Internet Explorer s_DestroyLinkCallback Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

Mozilla Firefox Unauthorized Access Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 47.0. An attacker can exploit the vulnerability to return incorrect privilege notifications and access restricted resources...

Samba 4.x < 4.1.22 Multiple Vulnerabilities

Binary data 9346.prm...

Vulnerabilities in iOS and Mac OS X operating systems, which allow attackers to obtain confidential information from the kernel’s memory

The vulnerability of the Disk Images subsystem in iOS and Mac OS X operating systems exists due to insufficient checks on the status of resources when they are potentially shared among multiple processes. Exploiting this vulnerability could allow a malicious actor to obtain confidential informati...

Samba 4.2.x < 4.2.7 / 4.3.x < 4.3.3 Multiple Vulnerabilities

Binary data 9347.prm...

Design/Logic Flaw

Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from pods in other namespaces, allows remote authenticated users to access network resources on restricted pods via an s2i build with a builder image that 1 contain...

CVE-2016-3708

CVE-2016-3708 affects Red Hat OpenShift Enterprise 3.2 when multi-tenant SDN is enabled. A build running in a namespace that would normally be isolated from other pods can access network resources on restricted pods via an s2i build using a builder image that (1) contains ONBUILD commands or (2) ...

CVE-2016-3708

Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from pods in other namespaces, allows remote authenticated users to access network resources on restricted pods via an s2i build with a builder image that 1 contain...

Shopify: Fetching external resources through svg images

Hi, I found the exactly same bug 97501 at https://app.shopify.com/services/partners/apiclients/ when uploading the svg image on app icon. Steps to reproduce it + Make a new app at https://app.shopify.com/services/partners/apiclients + Goto app setting...

IBM TRIRIGA Application Platform HTTP Request Forwarding Vulnerability

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

Jetty Privilege Gain Vulnerability

Jetty is a free and open source project of the Eclipse Foundation , is a Java-based Web server and Java Servlet container . A privilege acquisition vulnerability exists in the path normalization mechanism in the PathResource class in Jetty version 9.3.x. An attacker can exploit this vulnerability...

JVN#26298347: Cybozu Garoon vulnerable to denial-of-service (DoS)

Cybozu Garoon is a groupware. Cybozu Garoon contains a denial-of-service DoS vulnerability. Impact An attacker may be able to cause a denial-of-service DoS that consumes system resources. Solution Update the Software Update to the latest version according to the information provided by the...

Cisco IOS XR < 6.1.1 on ASR 9000 LPTS DoS

The version of Cisco IOS XR running on the remote ASR 9000 device is prior to 6.1.1. It is, therefore, affected by a denial of service vulnerability in the Local Packet Transport Services LPTS network stack due to improper handling of flow base entries, in which too many known entries for a...