9311 matches found
Fedora 30 : golang-github-gorilla-websocket (2020-8f18c45545)
Update to latest version. Fix GHSA-jf24-p9p9-4rjh. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues....
Fedora 31 : golang-github-gorilla-websocket (2020-0ae6297680)
Update to latest version. Fix GHSA-jf24-p9p9-4rjh. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues....
Fedora: Security Advisory for golang-github-gorilla-websocket (FEDORA-2020-0ae6297680)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for golang-github-gorilla-websocket (FEDORA-2020-8f18c45545)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 31 Update: golang-github-gorilla-websocket-1.4.1-1.fc31
Gorilla WebSocket is a Go implementation of the WebSocket protocol...
[SECURITY] Fedora 30 Update: golang-github-gorilla-websocket-1.4.1-1.fc30
A WebSocket implementation for Go...
Debian DLA-2110-1 : netty-3.9 security update
Several vulnerabilities were discovered in Netty, a Java NIO client/server socket framework : CVE-2014-0193 WebSocket08FrameDecoder allows remote attackers to cause a denial of service memory consumption via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames...
PT-2020-6657
Name of the Vulnerable Software and Affected Versions FortiManager versions 6.2.1 through 6.0.6 and below Description The issue is related to insufficient verification of data authenticity, which may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking CSWSH attack. This...
InspIRCd websocket module double free vulnerability
The InspIRCd development team reports: The websocket module before v3.8.1 contains a double free vulnerability. When combined with a HTTP reverse proxy this vulnerability can be used by any user who is GKZ-lined to remotely crash an InspIRCd server...
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2019-1992)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-7232
Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information such as usernames and password hashes via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL...
CVE-2020-7232
Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information such as usernames and password hashes via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL...
Information disclosure
Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information such as usernames and password hashes via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL...
CVE-2020-7232
Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information such as usernames and password hashes via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL...
CVE-2020-7232
Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information such as usernames and password hashes via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL...
CVE-2020-7232
CVE-2020-7232 affects Evoko Home devices version 1.31 through 1.37. The issue enables remote attackers to disclose sensitive information (e.g., usernames and password hashes) by sending a WebSocket request to the sockjs/224/uf1psgff/websocket URI over a secure WebSocket (wss://). The available co...
PT-2020-19482
Name of the Vulnerable Software and Affected Versions Evoko Home devices versions 1.31 through 1.37 Description The issue allows remote attackers to obtain sensitive information, such as usernames and password hashes, via a WebSocket request. This can be demonstrated by accessing the...
CVE-2020-7232: Undefined Security Weakness
Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information such as usernames and password hashes via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL...
CVE-2018-11712
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections...
