DEBIAN-CVE-2015-2924

The receivera function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message, a similar issue to CVE-2015-2922...

UBUNTU-CVE-2015-8215

net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service packet loss via a value that is 1 smaller than the minimum compliant value or 2 larger than the MTU of a...

Multiple Cross-Site Scripting Vulnerabilities in Cisco FireSIGHT Management Center

Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. Multiple...

Dwango niconico for iOS security bypass vulnerability

Dwango niconico for iOS is a suite of online pop-up video sharing website applications based on the iOS platform by Japanese company Dwango. A security bypass vulnerability exists in Dwango niconico for iOS version 6.37 and earlier. An attacker can exploit the vulnerability to conduct a...

Cisco Adaptive Security Appliance Denial of Service Vulnerability (CNVD-2015-06862)

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. The Cisco Adaptive Security Appliance ASA has a security vulnerability in its implementation. A remote attacker could cause a...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2015-06892)

Juniper Networks Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. A security vulnerability in Juniper Networks Junos OS can be exploited by remote attackers to cause a denial of service mbuf chain corruption and unexpected kernel termination by...

Splunk Enterprise Cross-Site Scripting Vulnerability (CNVD-2015-06521)

Splunk Enterprise is an enterprise-grade log analytics software that runs in Unix environments. A cross-site scripting vulnerability in Splunk Enterprise version 6.2.x prior to 6.2.6 and Splunk Light version 6.2.x prior to 6.2.6 allows remote attackers to inject arbitrary web script or HTML via...

Cisco IOS/IOS XE IPv6 Listening Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in the implementation of the IPv6 listening feature in Cisco IOS and IOS XE Software. A remote attacker could exploit this vulnerability to cause a...

Drupal Ajax Handler and Ctools Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.Ajax handler is one of the modules used to handle Ajax requests.Ctools Chaos tool suite is one of the API modules used to improve the development experience. A cross-site scripting...

Drupal Compass Rose Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Compass Rose is one of the direction compass modules. A cross-site scripting vulnerability exists in version 6.x-1.0 of the Drupal Compass Rose module, which can be exploited by an...

kernel: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements.

It was found that the Linux kernel's TCP/IP protocol suite implementation for IPv6 allowed the Hop Limit value to be set to a smaller value than the default one. An attacker on a local network could use this flaw to prevent systems on that network from sending or receiving network packets...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the PRE module in the Cisco IOS operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to cause service failure by initiating frequent connections to devices via the IPv6 protocol...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2015-04187)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack version 6.1.12 prior t...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2015-04171)

IBM Tivoli Storage Manager FastBack is a suite of software that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability in IBM Tivoli Storage Manager FastBack version 6.1 prior to 6.1.12 allows remote...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2015-04174)

IBM Tivoli Storage Manager FastBack is a suite of software that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability in IBM Tivoli Storage Manager FastBack version 6.1 prior to 6.1.12 allows remote...

IBM Tivoli Storage Manager FastBack Stack Buffer Overflow Vulnerability (CNVD-2015-04169)

IBM Tivoli Storage Manager FastBack is a suite of software that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability in IBM Tivoli Storage Manager FastBack version 6.1 prior to 6.1.12 allows remote...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2015-04168)

IBM Tivoli Storage Manager FastBack is a suite of software that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A buffer overflow vulnerability in IBM Tivoli Storage Manager FastBack version 6.1 prior to 6.1.12 allows remote...

IBM Tivoli Storage Manager FastBack Arbitrary Command Execution Vulnerability (CNVD-2015-04167)

IBM Tivoli Storage Manager FastBack is a suite of software that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. An arbitrary command execution vulnerability in IBM Tivoli Storage Manager FastBack version 6.1 prior to 6.1.12 allows...

Cisco IOS Software UBR Devices IPv6 VPN Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability in Cisco IOS Software UBR Devices IPv6 VPN Multiprotocol Label Switching allows remote attackers to quickly cause a denial of service by sending...

EAP: LDAP bind password is being logged with TRACE log level

AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...