CVE-2018-5527

On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy feature enabled can force the Traffic Management Microkernel tmm to leak memory. As a result, system memory usage...

Memory corruption

On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy feature enabled can force the Traffic Management Microkernel tmm to leak memory. As a result, system memory usage...

Security Bulletin: Vulnerabilities in RequisitePro GSKit Component (CVE-2014-0963)

Summary A vulnerability in IBM Rational RequisitePro in relation to TLS Record Processing has been discovered related to TLS 1.0 and later which can result in high CPU utilization that requires a system reboot to resolve. Vulnerability Details | Subscribe to My Notifications to be notified of...

Security Bulletin: IBM Security SiteProtector System can be affected by a vulnerability in IBM Global Security Kit (CVE-2014-0963) and in Apache Struts V1.x (CVE-2014-0114)

Summary The IBM Security SiteProtector System product can be impacted by a vulnerability in IBM Global Security Kit GSKit as well as a vulnerability in Apache Struts V1.x Vulnerability Details CVE ID: CVE-2014-0963 DESCRIPTION: A GSKit vulnerability in relation to TLS Record Processing has been...

CVE-2017-17171

Some Huawei smart phones have the denial of service DoS vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow...

Design/Logic Flaw

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier All versions, OpenPCS 7 V8.0 All versions, OpenPCS 7 V8.1 All versions V8.1 Upd5, OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd1, SIMATIC BATCH V7.1 and earlier All versions, SIMATIC BATCH V8.0 All versions V8.0...

CVE-2018-7899

The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105C00, 8.0.0.111C00, 8.0.0.112DC00, 8.0.0.116C00, 8.0.0.119C00, 8.0.0.119DC00, 8.0.0.122C00, 8.0.0.132C00, 8.0.0.132DC00, 8.0.0.142C00, 8.0.0.151C00, Berkeley-BD 1.0.0.21, 1.0.0.22, 1.0.0.23,...

Buffer overflow

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the la...

Double free

The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105C00, 8.0.0.111C00, 8.0.0.112DC00, 8.0.0.116C00, 8.0.0.119C00, 8.0.0.119DC00, 8.0.0.122C00, 8.0.0.132C00, 8.0.0.132DC00, 8.0.0.142C00, 8.0.0.151C00, Berkeley-BD 1.0.0.21, 1.0.0.22, 1.0.0.23,...

CVE-2018-7899

The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105C00, 8.0.0.111C00, 8.0.0.112DC00, 8.0.0.116C00, 8.0.0.119C00, 8.0.0.119DC00, 8.0.0.122C00, 8.0.0.132C00, 8.0.0.132DC00, 8.0.0.142C00, 8.0.0.151C00, Berkeley-BD 1.0.0.21, 1.0.0.22, 1.0.0.23,...

CVE-2017-17313

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the la...

CVE-2017-17313

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the la...

CVE-2018-7899

CVE-2018-7899 corresponds to a double-free vulnerability in the Mali driver of Huawei Berkeley-AL20/ Berkeley-BD smartphones (Berkeley-AL20 8.0.0.x and Berkeley-BD 1.0.x ranges). The issue is triggered via the exception handling path and can be exploited by convincing a user to install a maliciou...

CVE-2018-7899

The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105C00, 8.0.0.111C00, 8.0.0.112DC00, 8.0.0.116C00, 8.0.0.119C00, 8.0.0.119DC00, 8.0.0.122C00, 8.0.0.132C00, 8.0.0.132DC00, 8.0.0.142C00, 8.0.0.151C00, Berkeley-BD 1.0.0.21, 1.0.0.22, 1.0.0.23,...

Huawei Berkeley Mali Driver Denial of Service Vulnerability

Berkeley-AL20, Berkeley-BD, etc. are smartphone products of China's Huawei Huawei. A denial-of-service vulnerability exists in the Mali driver of the Huawei Berkeley-AL20, Berkeley-BD, which can be exploited by an attacker to cause a system reboot by tricking the user into installing a malicious...

Adobe, Microsoft Push Critical Security Fixes

Adobe and Microsoft each released critical fixes for their products today, a.k.a "Patch Tuesday," the second Tuesday of every month. Adobe updated its Flash Player program to resolve a half dozen critical security holes. Microsoft issued updates to correct at least 65 security vulnerabilities in...

The vulnerability of the SCTP message verification mechanism in Huawei AR3200, Huawei AR1200, and Huawei AR120-S routers allows a hacker to trigger a system reboot.

The vulnerability of the SCTP message verification mechanism in microprogramming software routers of Huawei AR3200, Huawei AR1200, and Huawei AR120-S arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Input validation

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...

CVE-2017-17131

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...