192 matches found
Mageia: Security Advisory (MGASA-2017-0057)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-0057
creationtimestamp| type| source ---|---|--- 2021-06-10 02:56:56+00:00| published-proof-of-concept| Telegram/S5Y-AFLbi6iysUKyRa07Ee1Zig7W9EoEWDqcRtSW47BFA...
CVE-2021-0057
Uncontrolled search path in the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0057
CVE-2021-0057 is an issue in the Intel® NUC M15 Laptop Kit Driver Pack software (before 1.1) that allows an authenticated local user to potentially escalate privileges due to an uncontrolled search path. Red Hat/NVD/NVDA sources corroborate the same description. The Intel advisory (intel-sa-00507...
SUSE: Security Advisory (SUSE-SU-2012:0411-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2012:0472-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Intel® NUC M15 Laptop Kit Driver Pack Advisory
Summary: Potential security vulnerabilities in some Intel® NUC M15 Laptop Kit Driver Packs may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0056 Description: Insecure inherited permissions fo...
IBM MQ 7.5 / 8.0 / 9.0 < 9.0.0.11 LTS / 9.1 < 9.1.0.7 LTS / 9.2 < 9.2.0.1 LTS / 9.2 < 9.2.1 CD (6408626)
The version of IBM MQ Server running on the remote host is affected by a vulnerability. IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this...
Important: Red Hat Security Advisory: libpq security update
An update for libpq is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
RHEL 8 : libpq (RHSA-2021:0057)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0057 advisory. The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. The following...
CVE-2020-0057
CVE-2020-0057 affects Android 10, in btm_process_inq_results (btm_inq.cc) where a missing bounds check enables an out-of-bounds read that can disclose information locally without user interaction or additional privileges. Public documentation indicates mitigation via the March 2020 Android securi...
Important Photon OS Security Update - PHSA-2020-3.0-0057
Updates of 'nginx', 'yarn', 'python2', 'libsolv', 'bash' packages of Photon OS have been released...
Juniper JSA10970
The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the JSA10970 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self- reported version numbe...
Important: Red Hat Security Advisory: rh-java-common-apache-commons-beanutils security update
An update for rh-java-common-apache-commons-beanutils is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
NFX Series: Authentication Bypass Vulnerability Juniper Device Manager (JDM) (JSA10955)
An authentication bypass vulnerability exists in Junos Device Manager. An authenticated, local attacker can exploit this to bypass regular security controls and take control of the system. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid130264; scriptversion"1.3";...
CVE-2019-0057 NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.
An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager JDM application and take control of the system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1,...
CVE-2019-0057
CVE-2019-0057 : Juniper Junos OS has an improper authorization vulnerability that allows a local authenticated attacker to bypass security controls and take control of the Junos Device Manager (JDM). Affected: Junos OS versions prior to 18.2R1 and 18.2X75-D5. Documents confirm local vector with h...
Juniper Junos CVE-2019-0057 Local Authorization Bypass Vulnerability
Description Juniper Junos is prone to a local authorization-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Versions prior to Junos OS 18.2R1, and 18.2X75-D5 are vulnerable. Technologies Affected Juniper Junos 18.2...
Arbitrary Code Execution
Red Hat CloudForms Management Engine delivers the insight, control, and automation enterprises need to address the challenges of managing virtual environments, which are far more complex than physical ones. This technology enables enterprises with existing virtual infrastructures to improve...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was discovered that the PHP XSL extension did not restrict the file writing capability of libxslt. A remote attacker could use this flaw to create or overwrite an arbitrary file that is writable by the user...