Red Hat Security Advisory 2017-1759-01 - FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service server, designed to allow centralized authentication and authorization for a network. Security Fix: An out-of-bounds write flaw was found in the way FreeRADIUS server handled certain attributes in request packets. A remote attacker could use this flaw to crash the FreeRADIUS server or to execute arbitrary code in the context of the FreeRADIUS server process by sending a specially crafted request packet.
c15bef609eb1ab913d68d88b4c2dc9457c9749eb8feb7d799a533157a6978ec0
Ubuntu Security Notice 3347-2 - USN-3347-1 fixed a vulnerability in Libgcrypt. This update provides the corresponding update for Ubuntu 12.04 ESM. A Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot A Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and A Yuval Yarom discovered that Libgcrypt was susceptible to an attack via A side channels. A local attacker could use this attack to recover RSA A private keys. Various other issues were also addressed.
cef9c437283906f956e60f6df98ddc0f810f887f63be10ecd8f7232cf64dd7e6
Hashicorp vagrant-vmware-fusion versions 4.0.20 and below suffer from a local root privilege escalation vulnerability.
abdc50db20a101b047974cc99ce3df26fbc159554720c0b62b943a6f559177ef
PEGA Platform versions 7.2 ML0 and below suffer from missing access control and cross site scripting vulnerabilities.
20e1a6dbc16ac5196217cef7e109e692ddfeba3348cfea759557d84256536b9d
DotCMS version 4.1.1 suffers from a remote shell upload vulnerability.
e4c3a573a9e295eb33e393e863f9b9d0de5b31c1e1cab1d466e26029dd1e2363
Orangescrum version 1.6.1 suffers from cross site scripting and remote file upload vulnerabilities.
106418e31fa4cbf360e7471d81c2df8932c71452c44b9ba4675115930b0547d9
Belkin NetCam F7D7601 suffers from remote command execution, network fingerprinting, and hard-coded password vulnerabilities.
4bd2b5bb8c5fc1891523e53b3179f3ae7e600feacbf458153657ff0e4b2e1524
FTPGetter version 5.89.0.85 SEH buffer overflow exploit.
4fa92d2f4bc97359cff9f04b584dd37f0cfcc11abec7d9380c43260b85836ec4