4243 matches found
[SECURITY] Fedora 27 Update: ntp-4.2.8p11-1.fc27
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts are in the ntp-perl package, ntpdate is in...
[SECURITY] Fedora 26 Update: ntp-4.2.8p11-1.fc26
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts are in the ntp-perl package, ntpdate is in...
Important: java-1.7.0-openjdk
Issue Overview: DerValue unbounded memory allocation: It was discovered that the Libraries component of OpenJDK failed to sufficiently limit the amount of memory allocated when reading DER encoded input. A remote attacker could possibly use this flaw to make a Java application use an excessive...
EulerOS 2.0 SP2 : java-1.7.0-openjdk (EulerOS-SA-2018-1059)
According to the versions of the java-1.7.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the AWT component of OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java...
The vulnerability of the Linux operating system’s TCP stack allows a hacker to induce a service failure.
The vulnerability of the Linux operating system’s TCP stack exists due to errors in the SYN cookie mechanism. Exploiting this vulnerability allows a remote attacker to cause a service failure resulting in increased computational resources usage through the use of specially crafted SYN packets...
FreeBSD-SA-18:02.ntp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-18:02.ntp Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities of ntp Category: contrib Module: ntp Announced: 2018-03-07 Credits: Network Time...
OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)
It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out...
Microsoft Teams help & learning
None None...
Cisco Prime Network Denial of Service Vulnerability
Cisco Prime Network is the United States Cisco Cisco company's set of network administrators for network usage, operational status and other management and configuration and fault management network analysis software. A denial of service vulnerability exists in the TCP throttling process in Cisco...
CVE-2018-0137
A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate limiting protection for TCP listening ports. An attacker could explo...
[SECURITY] Fedora 27 Update: rsync-3.1.3-1.fc27
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...
Easy!Appointments v1.2.1 Multiple Stored XSS Vulnerabilities
Summary Easy!Appointments is a highly customizable web application that allows your customers to book appointments with you via the web. Moreover, it provides the ability to sync your data with Google Calendar so you can use them with other services. It is an open source project and you can...
The vulnerability of the WebRTC component in Google Chrome allows a hacker to trigger a race condition.
The vulnerability of the WebRTC component in Google Chrome arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to induce a race condition through a specially crafted HTML page...
The vulnerability of the KEYS subsystem in the Linux operating system allows a hacker to trigger a service failure or cause other adverse effects.
The vulnerability of the KEYS subsystem in the Linux operating system is related to incorrect synchronization of update procedures. Exploiting this vulnerability can allow an attacker to cause service failures or other effects through specially crafted system calls...
Synchronization State for WEM Agents shows question mark (?) on WEM Administration Console
Synchronization State for WEM Agents shows a question mark ? or red crosson the WEM Administration console...
Security feature bypass
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possibility of out-of-bound buffer accesses due to no synchronization in accessing global variables by multiple threads...
CVE-2017-11023
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possibility of out-of-bound buffer accesses due to no synchronization in accessing global variables by multiple threads...
CVE-2017-11023
Technical details (affected products, versions, root cause, and fixes) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2017-11023
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possibility of out-of-bound buffer accesses due to no synchronization in accessing global variables by multiple threads...
CVE-2017-14028
A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exhaust memory resources by sending a large amount ...