CVE-2017-9787: Undefined Security Weakness

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

CVE-2017-2144: Undefined Security Weakness

Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page...

CVE-2017-7905

A Weak Cryptography for Passwords issue was discovered in General Electric GE Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 469 Motor Protection Relay, firmware versions prior to Versio...

CVE-2015-7781: Undefined Security Weakness

ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions...

AgileBits 1Password 6.3.3 Multiple Vulnerabilities

The version of AgileBits 1Password installed on the remote Windows host is equal or prior to 6.3.3. It is, therefore, affected by multiple vulnerabilities : - A security weakness exists in the internal web browser in which the default protocol that is used is set to HTTP. If a user visits a websi...

CVE-2017-8235: Undefined Security Weakness

In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protected...

CVE-2016-10332: Undefined Security Weakness

In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications...

IBM WebSphere Application Server Information Disclosure Vulnerability (swg21998469)

IBM WebSphere Application Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-1137

IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to the admin console. IBM X-Force ID: 121549...

CVE-2017-8855: Undefined Security Weakness

wolfSSL before 3.11.0 does not prevent wcDhAgree from accepting a malformed DH key...

CVE-2017-8072: Undefined Security Weakness

The cp2112gpiodirectioninput function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO error status for a zero-length report, which allows local users to have an unspecified impact via unknown vectors...

CVE-2016-6726: Undefined Security Weakness

Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices...

CVE-2015-1839: Undefined Security Weakness

modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...

CVE-2015-1838: Undefined Security Weakness

modules/serverdensitydevice.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...

CVE-2016-6879: Undefined Security Weakness

The X509Certificate::allowedusage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one KeyUsage set in the enum value...

CVE-2016-9243: Undefined Security Weakness

HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digestsize...

Hacker Reveals Easiest Way to Hijack Privileged Windows User Session Without Password

You may be aware of the fact that a local Windows user with system rights and permissions can reset the password for other users, but did you know that a local user can also hijack other users' session, including domain admin/system user, without knowing their passwords? Alexander Korznikov, an...

CVE-2017-5859: Undefined Security Weakness

On Cambium Networks cnPilot R200/201 devices before 4.3, there is a vulnerability involving the certificate of the device and its RSA keys, aka RBN-183...

CVE-2016-7601: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Local Authentication" component, which does not honor the configured screen-lock time interval if the Touch ID prompt is visible...

CVE-2016-8379: Undefined Security Weakness

An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware...