TP-Link Archer CR-700 suffers from a cross site scripting vulnerability.
Monthly Archives: September 2016
Ubuntu Security Notice USN-3088-1
Ubuntu Security Notice 3088-1 – It was discovered that Bind incorrectly handled building responses to certain specially crafted requests. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service.
Red Hat Security Advisory 2016-1943-01
Red Hat Security Advisory 2016-1943-01 – KVM is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc. Security Fix: An out-of-bounds read/write access flaw was found in the way QEMU’s VGA emulation with VESA BIOS Extensions support performed read/write operations using I/O port methods. A privileged guest user could use this flaw to execute arbitrary code on the host with the privileges of the host’s QEMU process.
NetMan 204 Backdoor Account
NetMan 204 suffers from having a backdoor account being installed by default.
Bugtraq: [security bulletin] HPSBHF03652 rev.1 – HPE iMC PLAT Network Products running Apache Commons FileUpload, Remote Denial of Service (DoS)
[security bulletin] HPSBHF03652 rev.1 – HPE iMC PLAT Network Products running Apache Commons FileUpload, Remote Denial of Service (DoS)
Bugtraq: [SECURITY] [DSA 3679-1] jackrabbit security update
[SECURITY] [DSA 3679-1] jackrabbit security update
Bugtraq: ESA-2016-127: EMC ViPR SRM Stored Cross-Site Scripting Vulnerability
ESA-2016-127: EMC ViPR SRM Stored Cross-Site Scripting Vulnerability
Bugtraq: [SECURITY] [DSA 3680-1] bind9 security update
[SECURITY] [DSA 3680-1] bind9 security update
RHSA-2016:1943-2: Important: kvm security update
Red Hat Enterprise Linux: An update for kvm is now available for Red Hat Enterprise Linux 5.
Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives
a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.
CVE-2016-3710, CVE-2016-5403
RHSA-2016:1940-1: Important: openssl security update
Red Hat Enterprise Linux: An update for openssl is now available for Red Hat Enterprise Linux 6 and Red
Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives
a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.
CVE-2016-2177, CVE-2016-2178, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-6302, CVE-2016-6304, CVE-2016-6306