1071 matches found
CVE-2017-11395
Command injection vulnerability in Trend Micro Smart Protection Server Standalone 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations...
Trend Micro Smart Protection Operating System Command Injection Vulnerability
Trend Micro Smart Protection Server Standalone is a server that provides smart protection from Trend Micro. A command injection vulnerability exists in Trend Micro Smart Protection ServerStandalone. An attacker could exploit this vulnerability to execute arbitrary code...
[SECURITY] Fedora 26 Update: mingw-libidn2-2.0.4-1.fc26
Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892 and 5893 for internationalized domain names IDN. It is a standalone library, without any dependency on libidn...
[SECURITY] Fedora 27 Update: libidn2-2.0.4-1.fc27
Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892, 5893 and TR46 for internationalized domain names IDN. It is a standalone library, without any dependency on libidn...
[SECURITY] Fedora 25 Update: libidn2-2.0.4-1.fc25
Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892, 5893 and TR46 for internationalized domain names IDN. It is a standalone library, without any dependency on libidn...
[SECURITY] Fedora 26 Update: libidn2-2.0.4-1.fc26
Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892, 5893 and TR46 for internationalized domain names IDN. It is a standalone library, without any dependency on libidn...
Security feature bypass
The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reportinguser role could execute a report with the permissions of another reporting user, possibly gaining access to...
August 8, 2017—KB4034660 (OS Build 10586.1045)
None None...
CVE-2017-10605
On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic from flowing through the devices. Repeated crashes of the flowd process may constitute an extended denial of service...
July 11, 2017—KB4025342 (OS Build 15063.483)
None None...
Yaws 1.91 - Remote File Disclosure
Yaws 1.91 - Remote File Disclosure + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/YAWS-WEB-SERVER-v1.91-UNAUTHENTICATED-REMOTE-FILE-DISCLOSURE.txt + ISR: ApparitionSec Vendor: ========== yaws.hyber.org Product: =========...
CVE-2015-3189
With Cloud Foundry Runtime cf-release versions v208 or earlier, UAA Standalone versions 2.2.5 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier, old Password Reset Links are not expired after the user changes their current email address to a new one. This vulnerability is applicable...
CVE-2017-7967
All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability when a corrupted vf2 file is used. This vulnerability causes the software to halt or not start when trying to open the corrupted file. This vulnerability occurs...
thunderbird security update
CentOS Errata and Security Advisory CESA-2017:1201 An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
[SECURITY] Fedora 25 Update: thunderbird-52.1.0-1.fc25
Mozilla Thunderbird is a standalone mail and newsgroup client...
morty - Privacy aware web content sanitizer proxy as a service
Web content sanitizer proxy as a service. Morty rewrites web pages to exclude malicious HTML tags and attributes. It also replaces external resource references to prevent third party information leaks. The main goal of morty is to provide a result proxy for searx , but it can be used as a...
March 22, 2017—KB4016636 (OS Build 10586.842)
None None...
[SECURITY] Fedora 24 Update: thunderbird-45.7.0-1.fc24
Mozilla Thunderbird is a standalone mail and newsgroup client...