CVE-2017-4920

CVE-2017-4920 affects VMware NSX-V Edge: the OSPF implementation mishandles LSA processing in NSX-V Edge 6.2.x (before 6.2.8) and 6.3.x (before 6.3.3). A rogue LSA can trigger continuous LSAs between two routers, potentially creating a loop or causing loss of connectivity. The issue is mitigated ...

v-pb.ru XSS vulnerability

Open Bug Bounty ID: OBB-437201 Description| Value ---|--- Affected Website:| v-pb.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Cross-site Scripting (XSS)

vue is vulnerable to cross-site scripting XSS attacks. A malicious user can inject arbitrary Javascript through the use of v-bind object attributes which is then executed when the page is rendered...

How to collect logs for cases involving Oracle

Challenge An issue with backing up of the Oracle database server and/or removal of Oracle archived logs is suspected. Veeam Technical Support would like to gather information from your servers and databases to investigate this issue. Additional logs must be gathered manually from the guest OS on...

KB4034668: Windows 10 August 2017 Cumulative Update

The remote Windows host is missing security update 4034668. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the...

KB4038781: Windows 10 September 2017 Cumulative Update

The remote Windows host is missing security update 4038781. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory. The vulnerability could corrupt memory in a way that enables...

v-golf-ev.de XSS vulnerability

Open Bug Bounty ID: OBB-359668 Description| Value ---|--- Affected Website:| v-golf-ev.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

KB3217841: Security Update for the Hyper-V Denial of Service Vulnerability (April 2017)

The remote Windows host is missing a security update KB3217841. It is, therefore, affected by a denial of service vulnerability in Hyper-V due to improper validation of input from a privileged user on a guest operating system. C Tenable Network Security, Inc. include'compat.inc'; if description...

NPM-V < 2.4.2 Password Leak and Reset Vulnerability - Active Check

NPM-V is prone to password leak and password reset vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Bad Hyper-V Username Logon Attempt

Challenge Veeam ONE raises the following event-based alarm:Bad Hyper-V username logon attempt. Cause The Bad Host Username Logon alert suggests that someone is attempting to access the host with an invalid username or password. Solution Veeam ONE raises the Bad Hyper-V username logon attempt alar...

September 12, 2017—KB4038793 (Security-only update)

None None...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20171006)

Security Fixes : - Kernel memory corruption due to a buffer overflow was found in brcmfcfg80211mgmttx function in Linux kernels from v3.9-rc1 to v4.13-rc1. The vulnerability can be triggered by sending a crafted NL80211CMDFRAME packet via netlink. This flaw is unlikely to be triggered remotely as...

CentOS Update for kernel CESA-2017:2863 centos6

Check the version of kernel SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882783";...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

nhk.shop.v-lazer.com XSS vulnerability

Open Bug Bounty ID: OBB-322643 Description| Value ---|--- Affected Website:| nhk.shop.v-lazer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

art.shop.v-lazer.com XSS vulnerability

Open Bug Bounty ID: OBB-322629 Description| Value ---|--- Affected Website:| art.shop.v-lazer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

NPM-V (Network Power Manager) 2.4.1 - Password Reset

NPM-VNetwork Power Manager = 2.4.1 Reset Password Vulnerability Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NPM-V Affected Version : 2.4.1 and below Vendor : http://www.china-clever.com Product Link : http://www.china-clever.com/en/index.php/product?view=products&cid=125 Date:...

NPM-V (Network Power Manager) 2.4.1 Password Reset

NPM-VNetwork Power Manager = 2.4.1 Reset Password Vulnerability Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NPM-V Affected Version : 2.4.1 and below Vendor : http://www.china-clever.com Product Link : http://www.china-clever.com/en/index.php/product?view=products&cid=125 Date:...

NPM-V (Network Power Manager) 2.4.1 - Password Reset

NPM-V Network Power Manager 2.4.1 - Password Reset NPM-VNetwork Power Manager = 2.4.1 Reset Password Vulnerability Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NPM-V Affected Version : 2.4.1 and below Vendor : http://www.china-clever.com Product Link :...

The vulnerability of microprogramming software that uses UEFI (BIOS) stems from improper handling of code generation, allowing attackers to bypass System Protection mechanisms such as Device Guard and Hyper-V.

The vulnerability of microprogramming software that uses UEFI BIOS in Lenovo products is related to improper code generation. Exploiting this vulnerability allows a malicious actor, whether operating remotely with administrator privileges or locally, to execute specially crafted code that bypasse...