Git: Security bypass

Background Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Description Timo Schmid discovered that the Git restricted shell incorrectly filtered allowed commands. Impact A remote attacker...

CVE-2017-8441

Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to index aliases. This bug could allow a user with restricted permissions to view data they should not have access to when performing certain operations against an index alias...

Advantech MESR901 Authentication Bypass Vulnerability

Advantech MESR901 is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos Space Information Disclosure Vulnerability

Juniper Networks Junos Space is a network management solution from Juniper Networks, Inc. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. An information disclosure vulnerability exists in Juniper Networks Junos Spac...

CVE-2017-2309

On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. This represents an information leak risk...

CERIO DT-100G-N/DT-300N/CW-300N - Multiple Vulnerabilities

CERIO 11nbg 2.4Ghz High Power Wireless Router pekcmd Rootshell Backdoors Vendor: CERIO Corporation Product web page: http://www.cerio.com.tw Affected version: DT-100G-N fw: Cen-WR-G2H5 v1.0.6 DT-300N fw: Cen-CPE-N2H10A v1.0.14 DT-300N fw: Cen-CPE-N2H10A v1.1.6 CW-300N fw: Cen-CPE-N2H10A v1.0.22...

initroot: Bypassing Nexus 6 Secure Boot through Kernel Command-line Injection

In the May 2017 Android Security Bulletin, Google released a patch to a critical and unique vulnerability CVE-2016-10277 in the Nexus 6 bootloader we had found and responsibly disclosed. By exploiting the vulnerability, a physical adversary or one with authorized-ADB/fastboot USB access to the...

Apple macOS Sierra Kernel Restricted Memory Arbitrary Read Vulnerability

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. Apple macOS Sierra suffers from a kernel restricted memory arbitrary read vulnerability, which can be exploited by remote attackers to build malicious applications that read arbitrary restricted memory...

Apple macOS Sierra Restricted Memory Read Vulnerability (CNVD-2017-08139)

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. A restricted memory read vulnerability exists within Apple macOS Sierra, which can be exploited by remote attackers to build malicious applications that read arbitrary restricted memory...

Apple macOS Sierra Restricted Memory Read Vulnerability

Apple macOS is a set of operating systems that run on Apple's Macintosh line of computers. Apple macOS Sierra suffers from a restricted memory read vulnerability that can be exploited by remote attackers to build malicious applications that read arbitrary restricted memory...

Apple macOS Sierra Restricted Memory Read Vulnerability (CNVD-2017-08140)

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. Apple macOS Sierra suffers from a restricted memory read vulnerability that can be exploited by remote attackers to build malicious applications that read arbitrary restricted memory...

Xxe

An Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 and prior. An improperly restricted XML parser with improper restriction of XML external entity reference, or XXE may allow an attacker to enter malicious input through the...

SUSE SLES11 Security Update : bash (SUSE-SU-2017:1337-1)

This update for bash fixed several issues This security issue was fixed : - CVE-2016-9401: popd in bash might allowed local users to bypass the restricted shell and cause a use-after-free via a crafted address bsc1010845. The update package also includes non-security fixes. See advisory for...

Ubuntu 14.04 LTS / 16.04 LTS : Bash vulnerabilities (USN-3294-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3294-1 advisory. Bernd Dietzel discovered that Bash incorrectly expanded the hostname when displaying the prompt. If a remote attacker were able to modify a...

USN-3294-1 bash vulnerabilities

Bernd Dietzel discovered that Bash incorrectly expanded the hostname when displaying the prompt. If a remote attacker were able to modify a hostname, this flaw could be exploited to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 16.10. CVE-2016-0634...

USN-3287-1: Git vulnerability

Timo Schmid discovered that the Git restricted shell incorrectly filtered allowed commands. A remote attacker could possibly use this issue to run an interactive pager and access sensitive information...

USN-3287-1 git vulnerability

Timo Schmid discovered that the Git restricted shell incorrectly filtered allowed commands. A remote attacker could possibly use this issue to run an interactive pager and access sensitive information...

About the security content of watchOS 3.2.2

About the security content of watchOS 3.2.2 This document describes the security content of watchOS 3.2.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CVE-2017-7474

It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks...

Authentication flaw

It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks...