News aggregator

CVE-2017-16922

National Vulnerability Database - Mon, 03/05/2018 - 13:29
In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and retrieval of a file are possible via a remote, specifically crafted HTTP request.
Categories: Security News

CVE-2017-17428

National Vulnerability Database - Mon, 03/05/2018 - 13:29
Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.
Categories: Security News

CVE-2017-18215

National Vulnerability Database - Mon, 03/05/2018 - 13:29
xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to crashes or potentially code execution, because it uses an incorrect length value.
Categories: Security News

CVE-2017-18216

National Vulnerability Database - Mon, 03/05/2018 - 13:29
In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and BUG) because a required mutex is not used.
Categories: Security News

CVE-2018-5255

National Vulnerability Database - Mon, 03/05/2018 - 13:29
The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service (agent restart) via crafted UDP packets.
Categories: Security News

CVE-2017-7633

National Vulnerability Database - Mon, 03/05/2018 - 12:29
QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device.
Categories: Security News

CVE-2018-5449

National Vulnerability Database - Mon, 03/05/2018 - 12:29
A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does not check for a NULL value, allowing for an attacker to perform a denial of service attack.
Categories: Security News

CVE-2018-5453

National Vulnerability Database - Mon, 03/05/2018 - 12:29
An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTTP request, causing the device to become unavailable.
Categories: Security News

CVE-2018-5455

National Vulnerability Database - Mon, 03/05/2018 - 12:29
A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application allows a cookie parameter to consist of only digits, allowing an attacker to perform a brute force attack bypassing authentication and gaining access to device functions.
Categories: Security News

CVE-2017-7427

National Vulnerability Database - Mon, 03/05/2018 - 11:29
Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector, via vdtData in the Version discovery and via nextFrame in the Object Inspector and via Host GUID in the System details plugins.
Categories: Security News

CVE-2017-7437

National Vulnerability Database - Mon, 03/05/2018 - 11:29
NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via the "type" and "account" parameters of json requests.
Categories: Security News

CVE-2018-0490

National Vulnerability Database - Mon, 03/05/2018 - 10:29
An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that is mishandled during voting.
Categories: Security News

CVE-2018-0491

National Vulnerability Database - Mon, 03/05/2018 - 10:29
A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service (relay crash) because the KIST implementation allows a channel to be added more than once in the pending list.
Categories: Security News

CVE-2018-1000115

National Vulnerability Database - Mon, 03/05/2018 - 09:29
Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been reported by reliable sources). This attack appear to be exploitable via network connectivity to port 11211 UDP. This vulnerability appears to have been fixed in 1.5.6 due to the disabling of the UDP protocol by default.
Categories: Security News

CVE-2018-1316

National Vulnerability Database - Mon, 03/05/2018 - 09:29
The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directory traversal, resulting in the potential writing of files under unwanted locations, the overwriting of existing files or their deletion. This issue was addressed in Apache ODE 1.3.3 which was released in 2009, however the incorrect name CVE-2008-2370 was used on the advisory by mistake.
Categories: Security News

CVE-2018-7644

National Vulnerability Database - Mon, 03/05/2018 - 09:29
The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowing a remote attacker to construct a crafted SAML assertion on behalf of an Identity Provider that would pass as cryptographically valid, thereby allowing them to impersonate a user from that Identity Provider, aka a key confusion issue.
Categories: Security News

CVE-2018-7663

National Vulnerability Database - Mon, 03/05/2018 - 02:29
An issue was discovered in resources/views/layouts/app.blade.php in Voten.co before 2017-08-25. An unescaped template literal in the bio field of a user profile (/views/layouts/app.blade.php) allows for server-side template injection of arbitrary JavaScript that is executed upon viewing the attacker's profile.
Categories: Security News

CVE-2018-7664

National Vulnerability Database - Mon, 03/05/2018 - 02:29
An issue was discovered in ClipBucket before 4.0.0 Release 4902. Any OS commands can be injected via shell metacharacters in the file_name parameter to /api/file_uploader.php or /actions/file_downloader.php.
Categories: Security News

CVE-2018-7665

National Vulnerability Database - Mon, 03/05/2018 - 02:29
An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name parameter to actions/beats_uploader.php or actions/photo_uploader.php, or the coverPhoto parameter to edit_account.php.
Categories: Security News

CVE-2018-7666

National Vulnerability Database - Mon, 03/05/2018 - 02:29
An issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL injection vulnerabilities exist in the actions/vote_channel.php channelId parameter, the ajax/commonAjax.php email parameter, and the ajax/commonAjax.php username parameter.
Categories: Security News

Pages