CVE-2015-3423: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to execute arbitrary SQL commands via the 1 ctrl, 2 h%2427, 3 h%2439, 4 param0, 5 param1, 6 param2, 7 param3, 8 param4, 9 filterINSERTCOUNT, 10 filterMINORFALLOUT, 11...

EulerOS Virtualization for ARM 64 3.0.5.0 : xorg-x11-server (EulerOS-SA-2020-1062)

According to the versions of the xorg-x11-server packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An incorrect permission check for -modulepath and -logfile options when starting Xorg X server allows...

EulerOS 2.0 SP8 : xorg-x11-server (EulerOS-SA-2020-1037)

According to the version of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as...

Vulnerability of the `sof_set_get_large_ctrl_data()` function (sound/soc/sof/ipc.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the sofsetgetlargectrldata function sound/soc/sof/ipc.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2019-6689

Name of the Vulnerable Software and Affected Versions Yubico PAM Module versions prior to 2.10 Description The issue allows a remote attacker to bypass the common authentication process by providing a NULL value as the password string, potentially gaining access to an account. This can be achieve...

CVE-2019-15803

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50AAHH.0C0. Through an undocumented sequence of keypresses, undocumented functionality is triggered. A diagnostics shell is triggered via CTRL-ALT-t, which prompts for the password returned by fdssyspassDebugPasswdret. The...

PT-2019-3978

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.9 Description The issue is related to a memory leak in the sof set get large ctrl data function, located in sound/soc/sof/ipc.c. This memory leak can be triggered by causing sof get ctrl copy params failures,...

Debian DSA-4469-1 : libvirt - security update

Two vulnerabilities were discovered in Libvirt, a virtualisation abstraction library, allowing an API client with read-only permissions to execute arbitrary commands via the virConnectGetDomainCapabilities API, or read or execute arbitrary files via the virDomainSaveImageGetXMLDesc API...

PT-2019-12943

Name of the Vulnerable Software and Affected Versions Actiontec T2200H version T2200H-31.128L.08 Description An issue allows an attacker to gain root access by attaching a UART adapter to the system board and using a special key sequence, Ctrl-. After gaining root access, the attacker can make...

CVE-2018-20839

systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE aka current keyboard mode check is mishandled...

CVE-2018-20839

systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE aka current keyboard mode check is mishandled...

SUSE SLED15 / SLES15 Security Update : freerdp (SUSE-SU-2019:0539-1)

This update for freerdp to version 2.0.0rc4 fixes the following issues : Security issues fixed : CVE-2018-0886: Fix a remote code execution vulnerability CredSSP bsc1085416, bsc1087240, bsc1104918 CVE-2018-8789: Fix several denial of service vulnerabilities in the in the NTLM Authentication modul...

Repeat Ctrl down/up events sent to software on Linux VDA from Citrix Workspace App for Windows when holding down Ctrl key

There is a keyboard-related issue with the Linux VDA. If you hold down the Ctrl key when connected to the Linux VDA from Citrix Workspace Appfor Windows, you send repeat Ctrl down/up events to the software on the Linux VDA, which is expecting a single Ctrl Down event. If you hold down the Ctrl ke...

Up (Ultimate Plumber) - Tool For Writing Linux Pipes With Instant Live Preview

up is the Ultimate Plumber , a tool for writing Linux pipes in a terminal-based UI interactively, with instant live preview of command results. The main goal of the Ultimate Plumber is to help interactively and incrementally explore textual data in Linux, by making it easier to quickly build...

Updated bluez packages fix security vulnerability

A buffer overflow in pincodereplydump function CVE-2016-9800. A buffer overflow in setextctrl function CVE-2016-9801. A buffer overflow in commandsdump function CVE-2016-9804...

Fedora 28 : 1:epiphany (2018-a5e45fc9f7)

Fix CVE-2018-11396/CVE-2018-12016 795740 - Allow Ctrl+T in app mode again due to unintended consequences 796204 - Don't remember passwords when the setting is disabled 796219 - Fix password manager crash on chase.com GitLab 11 Note that Tenable Network Security has extracted the preceding...

VUEMUIAgent not launching when login to Windows right away after getting Ctrl+Alt+Del

VUEMUIAgent not launching after login to user session right away after getting to Ctrl+Alt+Del. When waiting for about two minutes at Ctrl+Alt+Del without login, and then after the two minutes we login, then the VUEMUIAgent launches fine...

PT-2018-17225

Name of the Vulnerable Software and Affected Versions: linux kernel versions prior to security patch level 2018-06-05 Description: The issue arises from a buffer over-read problem in the dci process ctrl status function when reading data from a buffer, potentially caused by incorrect length...

Microsoft Windows: Interactive logon: Do not require CTRL+ALT+DEL

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winildisablecad.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Do not require CTRL+ALT+DEL Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Thi...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2018:1378-1) (Spectre)

This update for qemu fixes several issues. This security issue was fixed : - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests bsc1092885. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all pri...