漏洞类别：General remote services 漏洞等级： 漏洞信息 Multiple Vulnerabilities have been reported in OpenSSH. - The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for gnome-shell to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for openvswitch to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Server 12-SP3 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious user…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for freeradius-server to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP3 漏洞危害 This vulnerability could be exploited to …

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for libplist to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP3 S…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for subversion to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 漏洞危害 This vulnerability could be ex…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for imagemagick to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP…

漏洞类别：Debian 漏洞等级： 漏洞信息 Debian has released security update for linux to fix the vulnerabilities. 漏洞危害 Successful exploitation of the vulnerability will allow privilege escalation, denial of service or information leaks. 解决方案 Refer to Debian security advisory D…

漏洞类别：OEL 漏洞等级： 漏洞信息 Oracle Enterprise Linux has released security update for unbreakable enterprise kernel to fix the vulnerabilities. Affected Products: Oracle Linux 7 Oracle Linux 6 漏洞危害 This vulnerability could be exploited to gain complete access to sensit…

漏洞类别：Local 漏洞等级： 漏洞信息 ElasticSearch Logstash is an open source, server-side data processing pipeline that ingests data from a multitude of sources simultaneously, transforms it, and then sends it to your favorite 'stash'. Elasticsearch Logstash is prone to an …

漏洞类别：Local 漏洞等级： 漏洞信息 ElasticSearch Logstash is an open source, server-side data processing pipeline that ingests data from a multitude of sources simultaneously, transforms it, and then sends it to your favorite 'stash'. The version of Apache Log4j used in Lo…

漏洞类别：RedHat 漏洞等级： 漏洞信息 XML Security Library is a C library based on LibXML2 and OpenSSL. It was discovered xmlsec1's use of libxml2 inadvertently enabled external entity expansion (XXE) along with validation. An attacker could craft an XML file that would caus…

漏洞类别：CGI 漏洞等级： 漏洞信息 McAfee ePolicy Orchestrator (ePO) software centralizes and streamlines management of endpoint, network, content security and compliance solutions. McAfee ePO was using Apache 2.4.25, which is vulnerable to the following issues: CVE-2017-316…

漏洞类别：Hardware 漏洞等级： 漏洞信息 Juniper JUNOS is the network operating system used in Juniper Networks hardware systems. On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, ha…

漏洞类别：Hardware 漏洞等级： 漏洞信息 Potential security vulnerabilities have been identified with HP A5120-48G-PoE+ EI Switch switches. A remote user with knowledge of the SNMP public community string can access potentially sensitive data (e.g., user names, passwords) in …

漏洞类别：RedHat 漏洞等级： 漏洞信息 The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for v…

漏洞类别：RedHat 漏洞等级： 漏洞信息 IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes multiple vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further …

漏洞类别：Hardware 漏洞等级： 漏洞信息 Juniper JUNOS is the network operating system used in Juniper Networks hardware systems. By flooding a router with specially crafted IPv6 traffic, all available resources can be consumed, leading to the inability to store next hop info…

漏洞类别：Hardware 漏洞等级： 漏洞信息 Juniper JUNOS is the network operating system used in Juniper Networks hardware systems. On Junos OS devices with SNMP enabled, a network based attacker with unfiltered access to the RE can cause the Junos OS snmpd daemon to crash and …

漏洞类别：Hardware 漏洞等级： 漏洞信息 Juniper JUNOS is the network operating system used in Juniper Networks hardware systems. libgd is an open-source image library which is bundled with PHP version 4.3 and above. An integer signedness vulnerability exists in libgd 2.1.1 w…

漏洞类别：Hardware 漏洞等级： 漏洞信息 Juniper JUNOS is the network operating system used in Juniper Networks hardware systems. The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certif…

漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that Augeas incorrectly handled certain strings. 漏洞危害 An attacker could use this issue to cause Augeas to crash, leading to a denial of service, or possibly execute arbitrary code. 解决方案 Refer to Ubuntu advisory USN-3400…

漏洞类别：Firewall 漏洞等级： 漏洞信息 pfSense is an open-source firewall/router which based on FreeBSD. pfsense can be deployed as a perimeter firewall, router, wireless access point, DHCP server, DNS server and VPN endpoint. The WebGUI in pfSense is affected with XSS vuln…

漏洞类别：Firewall 漏洞等级： 漏洞信息 pfSense is an open-source firewall/router which based on FreeBSD. pfsense can be deployed as a perimeter firewall, router, wireless access point, DHCP server, DNS server and VPN endpoint. The WebGUI in pfSense is affected with XSS and …

漏洞类别：Firewall 漏洞等级： 漏洞信息 pfSense is an open-source firewall/router which based on FreeBSD. pfsense can be deployed as a perimeter firewall, router, wireless access point, DHCP server, DNS server and VPN endpoint. The WebGUI in pfSense is affected with Command-…