Security News

CVE-2018-5539

National Vulnerability Database - Wed, 07/25/2018 - 10:29
Under certain conditions, on F5 BIG-IP ASM 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, 11.5.1-11.5.6, or 11.2.1, when processing CSRF protections, the BIG-IP ASM bd process may restart and produce a core file.
Categories: Security News

CVE-2018-5541

National Vulnerability Database - Wed, 07/25/2018 - 10:29
When F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is processing HTTP requests, an unusually large number of parameters can cause excessive CPU usage in the BIG-IP ASM bd process.
Categories: Security News

CVE-2018-5542

National Vulnerability Database - Wed, 07/25/2018 - 10:29
F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6, or 11.2.1-11.6.3.2 HTTPS health monitors do not validate the identity of the monitored server.
Categories: Security News

CVE-2018-10880

National Vulnerability Database - Wed, 07/25/2018 - 09:29
Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service.
Categories: Security News

CVE-2018-11491

National Vulnerability Database - Wed, 07/25/2018 - 09:29
ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution.
Categories: Security News

CVE-2018-6971

National Vulnerability Database - Wed, 07/25/2018 - 09:29
VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials in the vmmsi.log file when an account other than the currently logged on user is specified during installation (including silent installations). Successful exploitation of this issue may allow low privileged users access to the credentials specified during the Horizon View Agent installation.
Categories: Security News

CVE-2018-6972

National Vulnerability Database - Wed, 07/25/2018 - 09:29
VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.
Categories: Security News

CVE-2018-14596

National Vulnerability Database - Wed, 07/25/2018 - 00:29
wancms 1.0 through 5.0 allows remote attackers to cause a denial of service (resource consumption) via a checkcode (aka verification code) URI in which the values of font_size, width, and height are large numbers.
Categories: Security News

Vuln: Symantec Management Agent (Altiris) CVE-2018-5240 Privilege Escalation Vulnerability

SecurityFocus Vulnerabilities - Wed, 07/25/2018 - 00:00
Symantec Management Agent (Altiris) CVE-2018-5240 Privilege Escalation Vulnerability
Categories: Security News

Vuln: Microsoft Windows Kernel CVE-2018-8308 Local Privilege Escalation Vulnerability

SecurityFocus Vulnerabilities - Wed, 07/25/2018 - 00:00
Microsoft Windows Kernel CVE-2018-8308 Local Privilege Escalation Vulnerability
Categories: Security News

CVE-2018-10906

National Vulnerability Database - Tue, 07/24/2018 - 16:29
In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system, accessible by other users, and trick them into accessing files on that file system, possibly causing Denial of Service or other unspecified effects.
Categories: Security News

CVE-2018-11044

National Vulnerability Database - Tue, 07/24/2018 - 15:29
Pivotal Apps Manager included in Pivotal Application Service, versions 2.2.x prior to 2.2.1 and 2.1.x prior to 2.1.8 and 2.0.x prior to 2.0.17 and 1.12.x prior to 1.12.26, does not escape all user-provided content when sending invitation emails. A malicious authenticated user can inject content into an invite to another user, exploiting the trust implied by the source of the email.
Categories: Security News

CVE-2018-11047

National Vulnerability Database - Tue, 07/24/2018 - 15:29
Cloud Foundry UAA, versions 4.19 prior to 4.19.2 and 4.12 prior to 4.12.4 and 4.10 prior to 4.10.2 and 4.7 prior to 4.7.6 and 4.5 prior to 4.5.7, incorrectly authorizes requests to admin endpoints by accepting a valid refresh token in lieu of an access token. Refresh tokens by design have a longer expiration time than access tokens, allowing the possessor of a refresh token to authenticate longer than expected. This affects the administrative endpoints of the UAA. i.e. /Users, /Groups, etc. However, if the user has been deleted or had groups removed, or the client was deleted, the refresh token will no longer be valid.
Categories: Security News

CVE-2018-11059

National Vulnerability Database - Tue, 07/24/2018 - 15:29
RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the corrupted data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.
Categories: Security News

CVE-2018-11060

National Vulnerability Database - Tue, 07/24/2018 - 15:29
RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to elevate their privileges.
Categories: Security News

CVE-2018-10628

National Vulnerability Database - Tue, 07/24/2018 - 14:29
AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. Exploitation could allow remote code execution under the privileges of the InTouch View process.
Categories: Security News

CVE-2018-10627

National Vulnerability Database - Tue, 07/24/2018 - 13:29
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This vulnerability does not affect the i.LON 600 product.
Categories: Security News

CVE-2018-10632

National Vulnerability Database - Tue, 07/24/2018 - 13:29
In Moxa NPort 5210, 5230, and 5232 versions 2.9 build 17030709 and prior, the amount of resources requested by a malicious actor are not restricted, allowing for a denial-of-service condition.
Categories: Security News

CVE-2018-8851

National Vulnerability Database - Tue, 07/24/2018 - 13:29
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface.
Categories: Security News

CVE-2018-8855

National Vulnerability Database - Tue, 07/24/2018 - 13:29
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.
Categories: Security News

Pages