Collaborate Disseminate
Patterson Dental Eaglesoft is a dental records software. Eaglesoft uses a hard-coded database password that is shared across all installations. Continue reading VU#344432: Patterson Dental Eaglesoft uses a hard-coded database password across installations
Autodesk Backburner 2016,version 2016.0.0.2150 and earlier,fails to properly check the length of command input which may be leveraged to create a denial of service condition or to execute arbitrary code. Continue reading VU#732760: Autodesk Backburner Manager contains a stack-based buffer overflow vulnerability
npm allows packages to take actions that could result in a malicious npm package author to create a worm that spreads across the majority of the npm ecosystem. Continue reading VU#319816: npm fails to restrict the actions of malicious npm packages
Granite Data Services version 3.1.1-SNAPSHOT AMF framework is vulnerable to XML external entity(XXE)attack that may be leveraged to expose sensitive data on the host.. Continue reading VU#279472: Granite Data Services AMF framework fails to properly parse XML input containing a reference to external entities
The Solarwinds Dameware Remote Mini Controller Windows service is vulnerable to stack buffer overflow. Continue reading VU#897144: Solarwinds Dameware Remote Mini Controller Windows service is vulnerable to stack buffer overflow
The DTE Energy Insight app API allows an authenticated user to obtain and query certain limited customer information from other customers. Continue reading VU#713312: DTE Energy Insight app vulnerable to information exposure
Quagga,version 0.99.24.1 and earlier,contains a buffer overflow vulnerability in bgpd with BGP peers enabled for VPNv4 that may leveraged to gain code execution. Continue reading VU#270232: Quagga bgpd with BGP peers enabled for VPNv4 contains a buffer overflow vulnerability
Network traffic encrypted using an RSA-based SSL certificate may be decrypted if enough SSLv2 handshake data can be collected. This is known as the"DROWN"attack in the media. Continue reading VU#583776: Network traffic encrypted using RSA-based SSL certificates over SSLv2 may be decrypted by the DROWN attack
Content Delivery Networks(CDNs)may in some scenarios be manipulated into a forwarding loop,which consumes server resources and causes a denial of service(DoS)on the network. Continue reading VU#938151: Forwarding Loop Attacks in Content Delivery Networks may result in denial of service
Implementations of the IKEv2 protocol are vulnerable to network amplification attacks. Continue reading VU#419128: IKE/IKEv2 protocol implementations may allow network amplification attacks