CVE-2017-12261

A vulnerability in the restricted shell of the Cisco Identity Services Engine ISE that is accessible via SSH could allow an authenticated, local attacker to run arbitrary CLI commands with elevated privileges. The vulnerability is due to incomplete input validation of the user input for CLI...

CVE-2017-12261

A vulnerability in the restricted shell of the Cisco Identity Services Engine ISE that is accessible via SSH could allow an authenticated, local attacker to run arbitrary CLI commands with elevated privileges. The vulnerability is due to incomplete input validation of the user input for CLI...

Input validation

A vulnerability in the restricted shell of the Cisco Identity Services Engine ISE that is accessible via SSH could allow an authenticated, local attacker to run arbitrary CLI commands with elevated privileges. The vulnerability is due to incomplete input validation of the user input for CLI...

Medium: httpd

Issue Overview: Hash character matches all IPs: A regression was found in httpd, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource. CVE-2017-12171 Affected...

Elevation of Privilege Vulnerability in Multiple Cisco Products

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform oversees the network by collecting real-time information from the network, users, and devices, and developing and enforcing appropriate policies.ISE Express...

Cisco Identity Services Engine Privilege Escalation Vulnerability

A vulnerability in the restricted shell of the Cisco Identity Services Engine ISE that is accessible via SSH could allow an authenticated, local attacker to run arbitrary CLI commands with elevated privileges. The vulnerability is due to incomplete input validation of the user input for CLI...

Apple macOS High Sierra Kernel Security Bypass Vulnerability (CNVD-2017-34152)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security bypass vulnerability exists in the Kernel component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this vulnerability wi...

Apple macOS High Sierra CFString Security Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.CFString is one of the character conversion components. A security vulnerability exists in the CFString component in Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this...

Apple macOS High Sierra Kernel Security Bypass Vulnerability (CNVD-2017-34159)

Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security bypass vulnerability exists in the Kernel component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this vulnerability with...

Apple macOS High Sierra Kernel Security Bypass Vulnerability (CNVD-2017-34151)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security bypass vulnerability exists in the Kernel component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this vulnerability wi...

Apple macOS High Sierra QuickTime Address Bar Deception Vulnerability

Apple macOS High Sierra is a proprietary operating system developed by Apple Inc. for Mac computers.QuickTime is one of the multimedia playback components. A security vulnerability exists in the QuickTime component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this...

Authentication flaw

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell...

CVE-2017-14331

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell...

CVE-2017-14331

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell...

CVE-2017-14331

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell...

CentOS 6 : httpd (CESA-2017:2972) (Optionsbleed)

An update for httpd is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Apple iOS Bluetooth Security Bypass Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.Bluetooth component is one of the Bluetooth components... A security bypass vulnerability exists in the Bluetooth component in Apple iOS versions prior to 11. The vulnerability can be exploited by an attacker with a...

Extreme EXOS Security Bypass Vulnerability

Extreme EXOS is a new generation modular switch operating system from Extreme Networks. A security bypass vulnerability exists in Extreme EXOS versions 16.x, 21.x, and 22.x. The vulnerability can be exploited to bypass the 'exsh restricted shell' protection mechanism and gain access to the...

Xen CVE-2017-15595 Denial of Service Vulnerability

Description Xen is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Xen Xen version through 4.9.x are vulnerable. Technologies Affected Citrix XenServer 6.0.2 Citrix XenServer 6.2 Citrix XenServer...

Microsoft Windows Subsystem for Linux CVE-2017-8703 Local Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a local denial-of-service condition. Technologies Affected Microsoft Windows 10 version 1703 for x64-based Systems Recommendations Permit local access for trusted individuals onl...