Collaborate Disseminate
Alertus Desktop Notification for OS X,version 2.9.30.1700 and earlier,sets insecure permissions for configuration and other files,which may enable an unprivileged attacker to disable notifications and modify content locally. Continue reading VU#302544: Alertus Desktop Notification for OS X sets insecure permissions for configuration and other files
mDNSResponder provides unicast and multicast mDNS services on UNIX-like operating systems such as OS X. mDNSResponder version 379.27 and above prior to version 625.41.2 is vulnerable to several buffer overflow vulnerabilities,as well as a null pointer dereference. Continue reading VU#143335: mDNSResponder contains multiple memory-based vulnerabilities
Adobe Flash contains an unspecified vulnerability that is currently being exploited in the wild. Continue reading VU#748992: Adobe Flash memory corruption vulnerability
The Netgear D6000 and D3600 routers are vulnerable to authentication bypass and contain hard-coded cryptographic keys embedded in their firmware. Continue reading VU#778696: Netgear D6000 and D3600 contain hard-coded cryptographic keys and are vulnerable to authentication bypass
NTP.org’s reference implementation of NTP server,ntpd,contains multiple vulnerabilities. Continue reading VU#321640: NTP.org ntpd is vulnerable to denial of service and other vulnerabilities
Fonality(previously trixbox Pro)version 12.6 and later uses a hard-coded password,and the accompanying HUDweb plugin embeds a private SSL key. Continue reading VU#754056: Fonality contains a hard-coded password and embedded SSL private key
MEDHOST Perioperative Information Management System(PIMS)versions prior to 2015R1 contain hard-coded credentials that are used for customer database access. Continue reading VU#482135: MEDHOST Perioperative Information Management System contains hard-coded database credentials
The up.time agent for Linux versions 7.5 and 7.6 may allow an unauthenticated remote attacker to read arbitrary files from a system. Continue reading VU#204232: Up.time agent for Linux does not authenticate a user before allowing read access to the file system
Chef Manage add-on,version 1.11.4 and earlier,deserializes cookie data insecurely,which may be leveraged to gain unauthenticated remote code execution. Continue reading VU#586503: Chef Manage deserializes cookie data insecurely
The Lantronix xPrintServer and its accompanying cloud storage API contains several vulnerabilities. Continue reading VU#785823: Lantronix xPrintServer contains multiple vulnerabilities