1875 matches found
FreeBSD : mbed TLS (PolarSSL) -- multiple vulnerabilities (f41e3e54-076b-11e7-a9f2-0011d823eebd)
Janos Follath reports : - If a malicious peer supplies a certificate with a specially crafted secp224k1 public key, then an attacker can cause the server or client to attempt to free block of memory held on stack. Depending on the platform, this could result in a Denial of Service client crash or...
FusionVM Security Scanner
FusionVM is a vulnerability scanning product. Remote attackers can use FusionVM to detect vulnerabilities on a target server...
Fedora 25 : cacti (2017-8b0737b093)
Update to 1.0.4 Release notes : http://www.cacti.net/releasenotes100.php http://www.cacti.net/releasenotes101.php http://www.cacti.net/releasenotes102.php http://www.cacti.net/releasenotes103.php http://www.cacti.net/releasenotes104.php Note that Tenable Network Security has extracted the...
FreeBSD : codeigniter -- multiple vulnerabilities (71ebbc50-01c1-11e7-ae1b-002590263bf5)
The CodeIgniter changelog reports : Fixed an XSS vulnerability in Security Library method xssclean. Fixed a possible file inclusion vulnerability in Loader Library method vars. Fixed a possible remote code execution vulnerability in the Email Library when 'mail' or 'sendmail' are used thanks to...
Citrix Secure Hub - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Citrix Secure Hub published at the 'play' market has multiple vulnerabilities...
Fedora 25 : xen (2017-cdb53b04e0)
Qemu: net: mcffec: infinite loop while receiving data in mcffecreceive CVE-2016-9776 Qemu: audio: memory leakage in ac97 CVE-2017-5525 Qemu: audio: memory leakage in es1370 device CVE-2017-5526 oob access in cirrus bitblt copy XSA-208, CVE-2017-2615 Note that Tenable Network Security has extracte...
Advantech WebAccess < 8.2_20161101 Multiple Vulnerabilities
Binary data 9961.prm...
Advantech WebAccess < 7.0-2011.08.27 Multiple Vulnerabilities
Binary data 9954.prm...
AIX 7.1 TL 4 : ntp (IV91951) (deprecated)
NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2016-7427 NTP is vulnerable to a denial of service, caused by an error in broadcast mode replay prevention functionality. By sending specially crafted NTP packets, a local attacker could exploit this vulnerability to cause a denial o...
Atlassian JIRA 7.2.x < 7.2.6 Multiple Vulnerabilities
Binary data 9920.prm...
Atlassian JIRA 6.4.x < 6.4.11 Multiple Vulnerabilities
Binary data 9918.prm...
AlAhliMobile - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application AlAhliMobile published at the 'play' market has multiple vulnerabilities...
Fedora 25 : 2:qemu (2017-b953d4d3a4)
CVE-2016-6836: vmxnet: Information leakage in vmxnet3completepacket bz 1366370 - CVE-2016-7909: pcnet: Infinite loop in pcnetrdraaddr bz 1381196 - CVE-2016-7994: virtio-gpu: memory leak in resourcecreate2d bz 1382667 - CVE-2016-8577: 9pfs: host memory leakage in v9fsread bz 1383286 -...
OracleVM 3.3 / 3.4 : sudo (OVMSA-2016-0170)
The remote OracleVM system is missing necessary patches to address critical security updates : - Update noexec syscall blacklist - Fixes CVE-2016-7032, CVE-2016-7076 Resolves: rhbz1391937 - RHEL-6.8 erratum - fixed a bug causing that non-root users can list privileges of other users Resolves:...
PHP 5.6.x < 5.6.28 / 7.0.x < 7.0.13 Multiple Vulnerabilities
Binary data 9809.prm...
Drupal 7.x < 7.52 Multiple Vulnerabilites
Binary data 9820.prm...
Puppet Enterprise 2015.x / 2016.x < 2016.4.0 Multiple Vulnerabilities
According to its self-reported version number, the Puppet Enterprise application running on the remote host is version 2015.x or 2016.x prior to 2016.4.0. It is, therefore, affected by the following vulnerabilities : - A cross-site redirection vulnerability exists within the /auth/login script du...
Ali poly security Android application vulnerability scanner analysis: local denial of service detection detailed explanation-vulnerability warning-the black bar safety net
Ali poly security of the Android application vulnerability scanners have a detection item is a local denial of service vulnerability detection using static analysis applied motion blur test of the method to the detection, the detection results are accurate and comprehensive. This article will tal...
ManageEngine ServiceDesk Plus 9.2.0 < Build 9228 Multiple Vulnerabilities
The remote host is running ManageEngine ServiceDesk Plus version 9.2.0 prior to build 9228. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of input before returning it to users. An unauthenticated, remote attacker...