CVE-2018-1172

it was found that Squid, when used as a reverse proxy, did not handle ESI responses properly. A malicious web server could use this flaw to crash Squid...

FreeBSD : jenkins -- multiple vulnerabilities (aaba17aa-782e-4843-8a79-7756cfa2bf89)

Jenkins developers report : The Jenkins CLI sent different error responses for commands with view and agent arguments depending on the existence of the specified views or agents to unauthorized users. This allowed attackers to determine whether views or agents with specified names exist. The...

SickRage Information Disclosure Vulnerability

SickRage is an automated video manager for managing and storing TV programs. A security vulnerability exists in versions prior to SickRage v2018.03.09-1, which stems from an HTTP response containing credentials in plaintext form. An attacker could exploit the vulnerability to obtain information...

Hardcoded credentials

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

CVE-2018-9160

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

CVE-2018-9160

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

CVE-2018-9160

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

PYSEC-2018-101

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

PYSEC-2018-101

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

CVE-2018-9160

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

GLSA-201803-10 : collectd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201803-10 collectd: Multiple vulnerabilities Multiple vulnerabilities have been found in Gentoos collectd package. Please review the referenced CVE identifiers and bug entries for details. Impact : A local attacker, who either is...

USN-3600-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled certain stream metadata. A remote attacker could possibly use this issue to set arbitrary metadata. This issue only affected Ubuntu 14.04 LTS. CVE-2016-10712 It was discovered that PHP incorrectly handled the PHAR 404 error page. A remote attacker...

dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server

An out-of-bound memory access flaw was found in the way dhclient processed a DHCP response packet. A malicious DHCP server could potentially use this flaw to crash dhclient processes running on DHCP client machines via a crafted DHCP response packet...

Ping Identity: Server-Side Request Forgery on SAML Application - Import via URL

Summary == The My Applications feature on PingOne Identity admin allows you to add new SAML applications to your account. One feature allows you to import metadata via URI instead of via upload. This uses Java 1.8 to make an external web request to the URI supplied. Typically this is hard to...

CVE-2016-0275

IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM for Corporate Payment Services CPS for...

CVE-2016-0275

IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM for Corporate Payment Services CPS for...

CVE-2016-0275

IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM for Corporate Payment Services CPS for...

SUSE SLES12 Security Update : squid (SUSE-SU-2018:0636-1)

This update for squid fixes the following issues: Security issues fixed : - CVE-2018-1000024: DoS fix caused by incorrect pointer handling when processing ESI responses. This affects the default custom esiparser bsc1077003. - CVE-2018-1000027: DoS fix caused by incorrect pointer handing whien...

Ubuntu 14.04 LTS / 16.04 LTS : DHCP vulnerabilities (USN-3586-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3586-1 advisory. Konstantin Orekhov discovered that the DHCP server incorrectly handled a large number of concurrent TCP sessions. A remote attacker could...

USN-3586-1: DHCP vulnerabilities

Konstantin Orekhov discovered that the DHCP server incorrectly handled a large number of concurrent TCP sessions. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2016-2774 It was discovered that the...