5688 matches found
April 10, 2018—KB4093109 (OS Build 10586.1540)
None None...
zone-telechargement.cc XSS vulnerability
Open Bug Bounty ID: OBB-593885 Description| Value ---|--- Affected Website:| zone-telechargement.cc Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2018-07304)
Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in the Zone-Based Firewall code in Cisco IOS XE Software. A remote attacker could exploit this vulnerability to cause a denial of service crash...
Design/Logic Flaw
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...
CVE-2018-0157
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...
CVE-2018-0157
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...
CVE-2018-0157
The CVE-2018-0157 issue affects Cisco IOS XE Software Zone-Based Firewall, caused by how fragmented IPv4/IPv6 packets are handled in the firewall code. An unauthenticated remote attacker can trigger a device reload/DoS by sending fragmented packets. Affected releases are Everest-16.4.1, Everest-1...
CVE-2018-0157
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...
Cisco IOS XE Software Zone-Based Firewall IP Fragmentation Denial of Service Vulnerability
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...
CVE-2018-0157: Undefined Security Weakness
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...
PT-2018-8647
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software versions Everest-16.4.1 through Everest-16.6.1a Description: A vulnerability in the Zone-Based Firewall code could allow an unauthenticated, remote attacker to cause a device to reload. The issue is due to the handling o...
CVE-2018-0942
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow elevation of privilege, due to how Internet Explorer handles zone and integrity...
CVE-2018-0942: Undefined Security Weakness
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow elevation of privilege, due to how Internet Explorer handles zone and integrity...
Internet Explorer Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Internet Explorer fails a check, allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. This vulnerability by itself does not allow arbitrary co...
Solaris 10 (sparc) : 145333-33
Vulnerability in the Solaris Cluster component of Oracle and Sun Systems Products Suite subcomponent: Zone Cluster Infrastructure. Supported versions that are affected are 3.2, 3.3 and 4 prior to 4.1 SRU 3. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of...
Solaris 10 (sparc) : 144221-12
Vulnerability in the Solaris Cluster component of Oracle and Sun Systems Products Suite subcomponent: Zone Cluster Infrastructure. Supported versions that are affected are 3.2, 3.3 and 4 prior to 4.1 SRU 3. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of...
Solaris 10 (sparc) : 150400-26
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: S10 Branded Zone. Supported versions that are affected are 10 and 11.2. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorize...
OracleVM 3.3 : dhcp (OVMSA-2018-0024)
The remote OracleVM system is missing necessary patches to address critical security updates : - Added oracle-errwarn-message.patch - Resolves: 1550085 - CVE-2018-5733 Avoid reference overflow 12:4.1.1-53.P1.2 - Resolves: 1550083 - CVE-2018-5732 Avoid options buffer overflow - Resolves: 1063217 -...