IBM Tivoli Storage Manager FastBack Arbitrary Command Execution Vulnerability (CNVD-2015-04167)

IBM Tivoli Storage Manager FastBack is a suite of software that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. An arbitrary command execution vulnerability in IBM Tivoli Storage Manager FastBack version 6.1 prior to 6.1.12 allows...

Cisco IOS Software UBR Devices IPv6 VPN Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability in Cisco IOS Software UBR Devices IPv6 VPN Multiprotocol Label Switching allows remote attackers to quickly cause a denial of service by sending...

EAP: LDAP bind password is being logged with TRACE log level

AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...

Cisco IOS XE Common Flow Table (CFT) Malformed IPv6 Message Handling Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. A security vulnerability in the Cisco IOS XE Common Flow Table CFT feature allows remote attackers to conduct denial-of-service attacks by sending malformed IPv6 messages encapsulating IPv4 UDP...

Cisco TelePresence VCS and Conductor SDP Message Denial of Service Vulnerability

Cisco TelePresence is a telepresence conferencing solution developed by Cisco.Cisco Expressway is a video conferencing application. A security vulnerability in Cisco TelePresence VCS and Conductor SDP message handling allows attackers to exploit the vulnerability to submit special IPv4 or IPv6v6...

Drupal Simple Subscription Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Simple Subscription is one of the subscription modules. A cross-site scripting vulnerability exists in the Drupal Simple Subscription module in versions 6.x-1.1 prior to 6.x-1.x and...

PT-2015-4555 · Red Hat · Redhat-Access-Plugin

Name of the Vulnerable Software and Affected Versions: Red Hat redhat-access-plugin versions prior to 6.0.3 for OpenStack Dashboard horizon Description: The issue allows remote attackers to read arbitrary files via a crafted path in the log-viewing function. Recommendations: For versions prior to...

ALPINE-CVE-2014-9636

unzip 6.0 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression...

Hex-Rays IDA Pro Buffer Overflow Vulnerability

Hex-Rays IDA Pro is a set of static decompiler software from Hex-Rays Belgium. A buffer overflow vulnerability exists in Hex-Rays IDA Pro versions prior to 6.6 cumulative fix 2014-12-24, no detailed vulnerability details are provided at this time...

UBUNTU-CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

CVE-2014-8367

SQL injection vulnerability in Aruba Networks ClearPass Policy Manager CPPM 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

UBUNTU-CVE-2014-7207

A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6selectident function calls, which allows local users to cause a denial of service NULL pointer dereference and system crash by leveraging 1 tun or 2 macvtap devic...

shim: out-of-bounds memory read flaw in DHCPv6 packet processing

An out-of-bounds memory read flaw was found in the way shim parsed certain IPv6 packets. A specially crafted DHCPv6 packet could possibly cause shim to crash, preventing the system from booting if IPv6 booting was enabled...

JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect availability via unknown vectors related to Deployment...

PT-2014-4539 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: A denial of service issue exists, allowing remote attackers to cause a device reload via a crafted DHCPv6 packet when DHCPv6 replay is configured. Thi...

PT-2014-1796

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 6.6 OpenSSH version 5.3p1 Description The issue allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character in the AcceptEnv lines of the sshd config...

UBUNTU-CVE-2014-2309

The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service memory consumption via a flood of ICMPv6 Router Advertisement packets...

PT-2014-4295

Name of the Vulnerable Software and Affected Versions OpenSSH versions through 6.4 Description The issue is related to the hash buffer function in schnorr.c, which does not initialize certain data structures when the J-PAKE protocol is enabled. This could allow remote attackers to cause a denial ...

UBUNTU-CVE-2013-7077

Cross-site scripting XSS vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

DEBIAN-CVE-2013-4458

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library aka glibc or libc6 2.18 and earlier allows remote attackers to cause a denial of service crash via a 1 hostname or 2 IP address that triggers a large number of AFINET6 address results. NOTE: th...