CVE-2017-5892

ASUS RT-AC* and RT-N* routers with firmware older than 3.0.0.4.380.7378 expose a JSONP information-disclosure flaw that can reveal router data such as a network map. The vulnerability is covered by CVE-2017-5892. Most CSRF-related issues were fixed in firmware 3.0.0.4.380.7378; the JSONP informat...

CVE-2017-8878

This entry covers ASUS RT-AC* and RT-N* routers with firmware prior to 3.0.0.4.380.7378. It describes an information-disclosure vulnerability where remote authenticated users can obtain the Wi-Fi password via WPS_info.xml. Impact is partial confidentiality (password exposure) with no integrity or...

CVE-2017-5891

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

CVE-2017-8877

ASUS RT-AC * and RT-N * router devices are affected by a JSONP Information Disclosure vulnerability in firmware versions through 3.0.0.4.380.7378 . An attacker can exploit this flaw to obtain sensitive information, such as the SSID . No specific exploit details or remediation steps are provided i...

CVE-2017-8878: Exposure of Sensitive Information to an Unauthorized Actor

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPSinfo.xml...

CVE-2017-5891: Cross-Site Request Forgery (CSRF)

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

CVE-2017-8877: Exposure of Sensitive Information to an Unauthorized Actor

ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...

PT-2017-18599

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 Description The issue allows for JSONP information disclosure, including sensitive details such as the SSID. Recommendations For ASUS RT-AC and RT-N devices with firmware throu...

PT-2017-16740

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware prior to 3.0.0.4.380.7378 Description The issue allows JSONP information disclosure, which can include details such as a network map. Recommendations For ASUS RT-AC and RT-N devices with firmware prior...

PT-2017-16739

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware prior to 3.0.0.4.380.7378 Description The issue affects the login page and save settings functionality, allowing for CSRF attacks. Recommendations For ASUS RT-AC and RT-N devices with firmware prior to...

CVE-2017-5892: Exposure of Sensitive Information to an Unauthorized Actor

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map...

PT-2017-18600

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware prior to 3.0.0.4.380.7378 Description The issue allows remote authenticated users to discover the Wi-Fi password via the WPS info.xml file. Recommendations For ASUS RT-AC and RT-N devices with firmware...

OracleVM 3.3 / 3.4 : bind (OVMSA-2017-0100)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix DNSKEY that encountered a CNAME 1447869, ISC change 3391 - Fix CVE-2017-3136 ISC change 4575 - Fix CVE-2017-3137 ISC change 4578 - Fix and test caching CNAME before DNAME ISC change 4558 - Fix...

Security update for Adobe Flash Player: May 9, 2017

None None...

CVE-2017-0290

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not...

PT-2017-2136

Name of the Vulnerable Software and Affected Versions Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 versions 1511 through 1703 Windows Server 2016 Description The issue is related to insufficient access restrictions in...

PT-2017-10473

Name of the Vulnerable Software and Affected Versions Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 versions 1511 and 1607 Windows Server 2016 Description The issue allows local users to gain privileges via a crafted...

KLA11012 Remote code execution vulnerability in the Microsoft Malware Protection Engine

An improper way of scanning files was found in the Microsoft Malware Protection. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Technical details To exploit this vulnerability, a malformed fi...

Spoofed Server Attacks

cxf-rt-rs-security-xml is vulnerable to server spoofing attacks. The attacks are possible because the XML security clients fail to validate whether the JAX-RS service response is signed or encrypted...

RHEL 6 : kernel-rt (RHSA-2017:0932)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0932 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...