2585 matches found
VMware vCenter Server Appliance 6.5 < 6.5 U1 Multiple Vulnerabilities (VMSA-2017-0013)
The version of VMware vCenter Server Appliance installed on the remote host is 6.5 prior to 6.5 Update 1 6.5 U1. It is, therefore, affected by multiple vulnerabilities : - An insecure library loading issue exists due to the use of the LDLIBRARYPATH variable to look for specific files or libraries...
Design/Logic Flaw
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153...
CVE-2017-1382
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153...
UBUNTU-CVE-2017-11565
debian/tor.init in the Debian tor0.2.9.11-1deb9u1 package for Tor was designed to execute aa-exec from the standard system pathname if the apparmor package is installed, but implements this incorrectly with a wrong assumption that the specific pathname would remain the same forever, which allows...
DEBIAN-CVE-2015-5300
The panicgate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds...
Haida Digital Cloud HD modeling, HD 3LS SCENE suffer from authorization-free authentication execution vulnerability
HD 3LS Scene Haida 3D laser point cloud processing software is a point cloud processing platform software. Haida Digital Cloud HD modeling, HD 3LS SCENE there is no authorization verification execution vulnerability, program startup requires .lic format file as the authorization file for...
italiastartupvisa.mise.gov.it XSS vulnerability
Vulnerable URL: http://italiastartupvisa.mise.gov.it/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
Dr0p1t Framework 1.3 - A Framework That Creates An Advanced FUD Dropper With Some Tricks
Have you ever heard about trojan droppers ? In short dropper is type of trojans that downloads other malwares and Dr0p1t gives you the chance to create a stealthy dropper that bypass most AVs and have a lot of tricks! Features Generated executable properties: The executable size is smaller compar...
CVE-2017-1144
IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. IBM X-Force ID: 122033...
IBM Integration Bus and WebSphere Message Broker Denial of Service Vulnerability
IBM Integration Bus formerly known as IBM WebSphere Message Broker is an enterprise service bus ESB product from IBM. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. A denial of service vulnerability...
CVE-2017-7884
In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges by replacing the service executable apcupsd.exe with a malicious executable that will run with SYSTEM...
Tails 3.0 - Live System to Preserve Your Privacy and Anonymity
Tails is a live system that aims to preserve your privacy and anonymity. It helps you to use the Internet anonymously and circumvent censorship almost anywhere you go and on any computer but leaving no trace unless you ask it to explicitly. It is a complete operating system designed to be used fr...
CVE-2017-4918
VMware Horizon View Client 2.x, 3.x and 4.x prior to 4.5.0 contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on the Mac OSX system where the client is installed...
openSUSE Security Update : mariadb (openSUSE-2017-644)
This update for mariadb fixes the following issues : - update to MariaDB 10.0.30 GA - notable changes : - XtraDB updated to 5.6.35-80.0 - TokuDB updated to 5.6.35-80.0 - PCRE updated to 8.40 - MDEV-11027: better InnoDB crash recovery progress reporting - MDEV-11520: improvements to how InnoDB dat...
UBUNTU-CVE-2015-4054
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash by sending a password packet before a startup packet...
CVE-2015-4054
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash by sending a password packet before a startup packet...
DEBIAN-CVE-2015-4054
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash by sending a password packet before a startup packet...
CVE-2015-4054
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash by sending a password packet before a startup packet...
Security fix for the ALT Linux 9 package apache2 version 1:2.4.25-alt1
May 18, 2017 Anton Farygin 1:2.4.25-alt1 - updated to 2.4.25 witch security fixes: + CVE-2016-8740 modhttp2: Mitigate DoS memory exhaustion via endless CONTINUATION frames. + CVE-2016-5387 core: Mitigate fcgi "httpoxy" issues + CVE-2016-2161 modauthdigest: Prevent segfaults during client entry...
