wordpress -- multiple issues

wordpress developers reports: JavaScript errors that prevented saving posts in Firefox have been fixed. The previous taxonomy-agnostic behavior of getcategorylink and categorydescription was restored. Switching themes will now attempt to restore previous widget assignments, even when there are no...

CVE-2018-0003

A specially crafted MPLS packet received or processed by the system, on an interface configured with MPLS, will store information in the system memory. Subsequently, if this stored information is accessed, this may result in a kernel crash leading to a denial of service. Affected releases are...

Vulnerability in PAN-OS and Panorama on Management Interface

Through the exploitation of a combination of unrelated vulnerabilities, and via the management interface of the device, an attacker could remotely execute code on PAN-OS or Panorama in the context of the highest privileged user. Ref PAN-61094 / PAN-80990 / PAN-80993 / PAN-80994 / CVE-2017-15944...

Input validation vulnerability in multiple Huawei products

Huawei IPS Module provides an administrator mechanism consisting of an administrator, an administrator interface.NGFW Module is a next-generation firewall product in a single-board form factor.NIP6300/6600 series products are the next-generation professional intrusion prevention products launched...

[SECURITY] Fedora 26 Update: gnome-shell-3.24.3-2.fc26

GNOME Shell provides core user interface functions for the GNOME 3 desktop, like switching to windows and launching applications. GNOME Shell takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts to provide a visually attractive and easy...

[SECURITY] Fedora 26 Update: gdm-3.24.3-1.fc26

GDM provides the graphical login screen, shown shortly after boot up, log out, and when user-switching...

UBUNTU-CVE-2017-13715

The skbflowdissect function in net/core/flowdissector.c in the Linux kernel before 4.3 does not ensure that nproto, ipproto, and thoff are initialized, which allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via a single crafted MPLS packet...

Windows COM Session Elevation of Privilege Vulnerability

An elevation of privilege exists in Windows when a DCOM object in Helppane.exe, configured to run as the interactive user, fails to properly authenticate the client. An attacker who successfully exploited the vulnerability could run arbitrary code in another user's session. To exploit the...

CVE-2016-8797

Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V200R006C00; S6300 with software V200R008C00, V200R007C00; S6700 with software...

CVE-2016-8797

Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V200R006C00; S6300 with software V200R008C00, V200R007C00; S6700 with software...

Websites Can Now Track You Online Across Multiple Web Browsers

You might be aware of websites, banks, retailers, and advertisers tracking your online activities using different Web "fingerprinting" techniques even in incognito/private mode, but now sites can track you anywhere online — even if you switch browsers. A team of researchers has recently developed...

ALPINE-CVE-2016-7931

The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mplsprint...

UBUNTU-CVE-2016-7931

The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mplsprint...

CVE-2016-9382

Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service guest OS crash by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode...

Sounds fun

I played with the web audio API for the first time recently, so I thought I'd write up what I learned. I think that's my job or something. Playing a sound The simplest demonstrable thing we can do with web audio is "play a sound". But to do that, we first we need to load & decode something: // Th...

x86 task switch to VM86 mode mis-handled

ISSUE DESCRIPTION LDTR, just like TR, is purely a protected mode facility. Hence even when switching to a VM86 mode task, LDTR loading needs to follow protected mode semantics. This was violated by the code. IMPACT On SVM AMD hardware: a malicious unprivileged guest process can escalate its...

Memory leak vulnerability in several Huawei products

Huawei AR3200 is a Huawei router device, and S12700, S5300, S5700, S6300, S6700, S7700, S9300, S9700 are Huawei switch devices. A memory disclosure vulnerability exists in multiple Huawei products. Due to the device's Multiprotocol Label Switching MPLS message processing module repeatedly...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2016-11388)

Huawei S9700 and others are S-series switches from Huawei China. A denial of service vulnerability exists in multiple Huawei products, which originates from a program failing to properly validate Multiprotocol Label Switching MPLS messages. A remote attacker could cause a denial of service by...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

Cisco IOS software contains a vulnerability that, when exploited, can cause the error ID CSCtj30155 and trigger a router reboot by sending specially crafted ICMPv6 packets via Multiprotocol Label Switching MPLS...

DEBIAN-CVE-2016-2074

Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command...