USN-3586-1 isc-dhcp vulnerabilities

Konstantin Orekhov discovered that the DHCP server incorrectly handled a large number of concurrent TCP sessions. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2016-2774 It was discovered that the...

GoAhead CGI Scanner

A GoAhead scanning tool is designed to gather information from servers. Such scans might indicate an attempt to disclose sensitive information. Remote attackers can use the GoAhead vulnerabilities on a target server...

Amazon Linux AMI : mysql55 (ALAS-2017-927)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized...

Amazon Linux AMI : mysql56 (ALAS-2017-888)

Server: Charsets unspecified vulnerability CPU Jul 2017 : Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows...

CVE-2016-9461

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on a WebDAV COPY action. This allowed an authenticated attacker with access to a read-only share to...

Vulnerability of the Microsoft Office package, the Microsoft SharePoint Server corporate application package, the Word Viewer software for reading doc files, the Microsoft Office Web Apps package, the Microsoft Word text editor, the Microsoft Excel spreadsheet editor, and the Microsoft Office Compatibility Pack, which allows a perpetrator to cause service interruptions or obtain confidential information from process memory.

The vulnerabilities of the Microsoft Office suite, the Microsoft SharePoint Server enterprise application suite, the Word Viewer document viewer software, the Microsoft Office Web Apps suite, the Microsoft Word text editor, the Microsoft Excel spreadsheet editor, and the Microsoft Office...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality and integrity of protected information

The ltsp-server package for the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities can lead to violations of privacy and the integrity of protected information. These vulnerabilities can be exploited by malicious individuals...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality of protected information

The multiple vulnerabilities in the xorg-server package of the Debian GNU/Linux operating system may lead to a violation of the confidentiality of protected information...

MariaDB Server 10.1.x < 10.1.11 Multiple Vulnerabilities

Binary data 9292.prm...

Meet The Cryptoworm, The Future of Ransomware

Ransomware is evolving and soon will share the same deadly efficiencies as notorious worms of the past, such as Conficker and SQL Slammer. In fact, according to security researchers at Cisco Talos, today’s newest ransomware, SamSam, is a harbinger of a new wave of more malicious, tenacious and...

Cross-Site Scripting Scanning Attempt (CVE-2015-4661; CVE-2019-16385; CVE-2019-9167; CVE-2020-10946; CVE-2020-12261; CVE-2020-13228; CVE-2020-13627; CVE-2020-13628; CVE-2020-14953; CVE-2021-21801; CVE-2021-25080; CVE-2022-25305; CVE-2022-28102)

Remote attackers use Cross-Site Scripting scanning in order to locate potential Cross-Site Scripting vulnerabilities on a target server, which could be later used for attacks...

SUSE-SU-2015:2088-1 Security update for LibVNCServer

The LibVNCServer package was updated to fix the following security issues: - bsc897031: fix several security issues: CVE-2014-6051: Integer overflow in MallocFrameBuffer on client side. CVE-2014-6052: Lack of malloc return value checking on client side. CVE-2014-6053: Server crash on a very large...

Microsoft Lync Server Multiple Vulnerabilities (3089952)

This host is missing an important security update according to Microsoft Bulletin MS15-104. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Double the bang for your buck with Acunetix Vulnerability Scanner

Acunetix have announced that they are extending their current free offering of the network security scan, part of their cloud-based web and network vulnerability scanner. Those signing up for a trial of the online version of Acunetix vulnerability scanner will now be able to scan their perimeter...

TR-0 6 9 auto configuration servers multiple vulnerabilities-vulnerability warning-the black bar safety net

Affected system: Broadband Forum TR-0 6 9 Description: -------------------------------------------------------------------------------- CVECAN ID: CVE-2 0 1 4-2 8 4 0,CVE-2 0 1 4-4 9 5 6,THE CVE-2 0 1 4-4 9 1 6,THE CVE-2 0 1 4-4 9 1 7,CVE-2 0 1 4-4 9 1 8,THE CVE-2 0 1 4-4 9 5 7 TR-0 6 9 is a DSL...

MGASA-2014-0532 Updated x11-server packages fix security vulnerabilities

Ilja van Sprundel of IOActive discovered several security issues in the X.org X server, which may lead to privilege escalation or denial of service CVE-2014-8091, CVE-2014-8092, CVE-2014-8093, CVE-2014-8094, CVE-2014-8095, CVE-2014-8096, CVE-2014-8097, CVE-2014-8098, CVE-2014-8099, CVE-2014-8100,...

PT-2014-1852 · X.Org +5 · Xorg-X11-Server-Debuginfo +15

Name of the Vulnerable Software and Affected Versions: xorg-x11-server-Xdmx versions 1.15.0 xorg-x11-server-debuginfo versions 1.15.0 xorg-x11-server-Xnest versions 1.15.0 xorg-x11-server-Xephyr versions 1.15.0 xorg-x11-server-source versions 1.15.0 xorg-x11-server-Xvfb versions 1.15.0...

QSSL Voyager 2.0 1B .photon Directory Information Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/1648/info The web server supplied with the QNX Voyager demo disk contains several vulnerabilities. First, Voyager will follow relative paths passed to it in requests. This includes ../ style paths, which will allow Voyage...

Zilab Chat and Instant Messaging (ZIM) 2.0/2.1 - Server Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/27940/info Zilab Chat and Instant Messaging ZIM Server is prone to multiple vulnerabilities, including denial-of-service issues and memory-corruption issues. A successful exploit may allow remote attackers to execute...

Seyeon FlexWATCH Network Video Server 2.2 Unauthorized Administrative Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8942/info It has been reported that FlexWATCH Network Video Server may be prone to an access validation error that may allow a remote attacker to gain administrative access to the system. The problem is reported to presen...