ROS-2-1881

🗓️ 08 Sep 2021 00:00:00Reported by RedosType

redos🔗 redos.red-soft.ru👁 20 Views

Multiple vulnerabilities in Exim server could allow remote attackers to execute arbitrary code.

Reporter	Title	Published	Views	Family All 802
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	15 Apr 202221:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202123:48	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: cURL vulnerabilities CVE-2020-8169 CVE-2020-8177 impact IBM Aspera Streaming/IBM Aspera Streaming for Video version 3.9.6.1 and earlier	8 Dec 202018:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to cURL vulnerabilities (CVE-2020-8169, CVE-2020-8177)	26 Feb 202113:18	–	ibm
IBM Security Bulletins	Security Bulletin: cURL vulnerabilities CVE-2020-8169 CVE-2020-8177 impact IBM Aspera High-Speed Transfer Server 3.9.6.2 and earlier and Aspera High-Speed Transfer Endpoint 3.9.6.2 and earlier	11 Dec 202018:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to Using Components with Known Vulnerabilities	30 Oct 202016:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Curl affect PowerSC (CVE-2020-8169, CVE-2020-8177)	23 Oct 202020:38	–	ibm
FreeBSD	curl -- multiple vulnerabilities	24 Jun 202000:00	–	freebsd

OS	OS Version	Architecture	Package	Package Version	Filename
redos	–	–	unknown	–	UNKNOWN

08 Sep 2021 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 29.3

CVSS 3.19.8

EPSS0.61664

exim server vulnerabilities arbitrary code execution symbolic link exploitation integer overflow user input validation.