Symantec Decomposer Engine Multiple Parsing Vulnerabilities

SUMMARY Symantec is aware of buffer overflow and memory corruption findings in the AntiVirus Decomposer engine used in various configurations by multiple Symantec products. FAQ on Impact to Symantec Products: AFFECTED PRODUCTS Affected Enterprise Products Product | Version | Solutions ---|---|---...

RHEL 7 : kernel (RHSA-2016:1277)

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

[SECURITY] Fedora 24 Update: mxml-2.9-1.fc24

Mini-XML is a small XML parsing library that you can use to read XML and XML-like data files in your application without requiring large non-standard libraries...

Cisco Small Business Device Detection (SNMP)

SNMP based detection of Cisco Small Business devices. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Open Source Real Estate Script 3.6.0 SQL Injection

Exploit Title: real-estate classified script Sql Injection Date: 2015-05-29 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.phpscriptsmall.com/product/open-source-real-estate-script/ Version: 3.6.0 Exploit :...

smallbusinessonlinecommunity.bankofamerica.com XSS vulnerability

Vulnerable URL: https://smallbusinessonlinecommunity.bankofamerica.com/community/stories/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS...

Small Business Accounting PRO - Apache license, BSD license, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Small Business Accounting PRO published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 24 Update: dropbear-2016.72-1.fc24

Dropbear is a relatively small SSH server and client. It's particularly use ful for "embedded"-type Linux or other Unix systems, such as wireless routers...

Schneider Electric SBO AS - Multiple Vulnerabilities

Schneider Electric SBO AS - Multiple Vulnerabilities Exploit Title: Schneider Electric SBO / AS Multiple Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.schneider-electric.com Versions Reported: Automation Server Series AS, AS-P, v1.7 and prior CVE-ID: CVE-2016-2278 About...

Cisco Small Business 500 Wireless Access Point Time Setting Vulnerability

The Cisco Small Business 500 Wireless Access Point is a wireless access point product that provides high-capacity wireless LAN and guest access services, among other features. A security vulnerability in the Cisco Small Business 500 Wireless Access Point allows a remote attacker to set the system...

CVE-2016-1334

Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457...

CVE-2016-1334

Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457...

CVE-2016-1334

CVE-2016-1334 affects Cisco Small Business 500 Series Wireless Access Point devices running firmware 1.0.4.4. Root cause: insufficient validation of parameters in HTTP POST handling, enabling remote attackers to set the system time via a crafted POST request. Impact stated as integrity disruption...

Unauthorized Firmware Retrieval Vulnerability in Cisco Universal Small Cell Devices

The Cisco Universal Small Cell Solution is an end-to-end architecture that integrates 3G, LTE, carrier-grade Wi-Fi and SON technologies to enable secure and effective heterogeneous networks. A security vulnerability exists in the flash memory of Cisco Universal Small Cell devices firmware...

PT-2016-4717

Name of the Vulnerable Software and Affected Versions Cisco Small Business 500 Wireless Access Point version 1.0.4.4 Description The issue allows remote attackers to set the system time via a crafted POST request. Recommendations For version 1.0.4.4, consider restricting access to the system time...

CVE-2016-1334: Improper Input Validation

Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457...

Cisco Small Business 500 Series Wireless Access Point Configuration Modification Vulnerability

A vulnerability in the web interface that is used to update the system time on Cisco Small Business 500 Series Wireless Access Point devices could allow an unauthenticated, remote attacker to impact the integrity of a system. The vulnerability is due to insufficient validation of user-controlled...

CVE-2016-1321

Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption key in flash memory, which allows remote attackers to bypass a certain certificate-validation feature and obtain sensitive firmware-image and IP address data via a request to an unspecified Cisco serve...

Design/Logic Flaw

Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption key in flash memory, which allows remote attackers to bypass a certain certificate-validation feature and obtain sensitive firmware-image and IP address data via a request to an unspecified Cisco serve...

CVE-2016-1321

Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption key in flash memory, which allows remote attackers to bypass a certain certificate-validation feature and obtain sensitive firmware-image and IP address data via a request to an unspecified Cisco serve...