CVE-2016-10332: Undefined Security Weakness

In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications...

IBM WebSphere Application Server Information Disclosure Vulnerability (swg21998469)

IBM WebSphere Application Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-1137

IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to the admin console. IBM X-Force ID: 121549...

CVE-2017-8855: Undefined Security Weakness

wolfSSL before 3.11.0 does not prevent wcDhAgree from accepting a malformed DH key...

CVE-2017-8072: Undefined Security Weakness

The cp2112gpiodirectioninput function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO error status for a zero-length report, which allows local users to have an unspecified impact via unknown vectors...

CVE-2016-6726: Undefined Security Weakness

Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices...

CVE-2015-1838: Undefined Security Weakness

modules/serverdensitydevice.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...

CVE-2015-1839: Undefined Security Weakness

modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...

CVE-2016-6879: Undefined Security Weakness

The X509Certificate::allowedusage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one KeyUsage set in the enum value...

CVE-2016-9243: Undefined Security Weakness

HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digestsize...

Hacker Reveals Easiest Way to Hijack Privileged Windows User Session Without Password

You may be aware of the fact that a local Windows user with system rights and permissions can reset the password for other users, but did you know that a local user can also hijack other users' session, including domain admin/system user, without knowing their passwords? Alexander Korznikov, an...

CVE-2017-5859: Undefined Security Weakness

On Cambium Networks cnPilot R200/201 devices before 4.3, there is a vulnerability involving the certificate of the device and its RSA keys, aka RBN-183...

CVE-2016-7601: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Local Authentication" component, which does not honor the configured screen-lock time interval if the Touch ID prompt is visible...

CVE-2016-10224: Undefined Security Weakness

An issue was discovered in Sauter NovaWeb web HMI. The application uses a protection mechanism that relies on the existence or values of a cookie, but it does not properly ensure that the cookie is valid for the associated user...

CVE-2016-8379: Undefined Security Weakness

An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware...

CVE-2016-10185: Undefined Security Weakness

An issue was discovered on the D-Link DWR-932B router. A securemode=no line exists in /var/miniupnpd.conf...

CVE-2016-8398: Undefined Security Weakness

Unauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS security context exists in the UE. Product: Android. Versions: Kernel 3.18. Android ID: A-31548486. References: QC-CR877705...

CVE-2016-2312: Undefined Security Weakness

Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...

CVE-2016-8600: Undefined Security Weakness

In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later...

Mac Malware Can Secretly Spy On Your Webcam and Mic – Here's How to Stay Safe

Apple Mac Computers are considered to be much safer than Windows at keeping viruses and malware out of its environment, but that’s simply not true anymore. It's not because Mac OS X is getting worse every day, but because hackers are getting smart and sophisticated these days. The bad news for Ma...