SUSE SLES12 Security Update : python36-setuptools (SUSE-SU-2023:0094-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0094-1 advisory. - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document bsc1206667. Tenable has extract...

GHSA-PRJV-JJ26-WF8H ClassLoader manipulation in Apache Struts

ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for...

Mageia: Security Advisory (MGASA-2016-0094)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0094)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2021-0094

Updates of 'openssl' packages of Photon OS have been released...

CVE-2021-0094

creationtimestamp| type| source ---|---|--- 2021-06-10 02:57:27+00:00| published-proof-of-concept| Telegram/8WlEF2F-YMygZ3j6cZEG66-kS1pQYz-TPupvt7hCiPgazj8...

CVE-2021-0094

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0094

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0094

Intel DSA (Driver and Support Assistant) before version 20.11.50.9 is affected by CVE-2021-0094 due to improper link resolution before file access, enabling potential local escalation of privilege for an authenticated user. Affected component: Intel® DSA; root cause: improper link resolution befo...

CentOS 8 : dotnet5.0 (CESA-2021:0094)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:0094 advisory. - dotnet: ASP.NET Core Callbacks outside of locks cause Krestel deadlock when using HTTP2 CVE-2021-1723 Note that Nessus has not tested for this issue but has...

Oracle Linux 8 : dotnet5.0 (ELSA-2021-0094)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0094 advisory. 5.0.102-2.0.1 - Add support for new Oracle release 5.0.102-2 - Rebuild with updated tests - Resolves: RHBZ1912684 5.0.102-1 - Update to .NET SDK 5.0.102 and...

RHEL 8 : dotnet5.0 (RHSA-2021:0094)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0094 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

CVE-2020-0094

creationtimestamp| type| source ---|---|--- 2020-05-15 00:34:10+00:00| seen| https://t.me/cibsecurity/12089...

CVE-2020-0094

CVE-2020-0094 affects Android 9 and 10 Media Framework via ExifUtils.cpp, in particular setImageHeight and setImageWidth. Root cause: an incorrect bounds check enables an out-of-bounds write, leading to local elevation of privilege without extra execution privileges. Impact: once exploited, attac...

Intel® CSME, Intel® SPS, Intel® TXE, Intel® DAL, and Intel® AMT 2019.1 QSR Advisory

Summary: Multiple potential security vulnerabilities in Intel® Converged Security & Management Engine Intel® CSME, Intel® Server Platform Services Intel® SPS, Intel® Trusted Execution Engine Interface Intel® TXE, Intel® Dynamic Application Loader Intel® DAL, and Intel® Active Management Technolog...

Security Bulletin: IBM Sterling Order Management, IBM Sterling Configure, Price, Quote and Sterling Web Channel are affected by Apache Struts 2 security vulnerabilities

Summary IBM Sterling Order Management, IBM Sterling Configure Price Quote and Sterling Web Channel use Apache Struts 2 and are affected by some of the vulnerabilities that exist in Apache Struts 2. Now a vulnerability related to Apache Commons FileUpload version included with Apache Struts 2...

CVE-2019-0094

creationtimestamp| type| source ---|---|--- 2019-05-27 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=395...

CVE-2019-0094

CVE-2019-0094 covers an insufficient input validation vulnerability in the Intel AMT subsystem that affects versions before 11.8.65, 11.11.65, 11.22.65, and 12.0.35, exposing unauthenticated users to potential denial of service via adjacent network access. Intel’s advisory and vendor security pag...

struts2: ClassLoader manipulation via request parameters

ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for...

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due a lack of validation for return objects without any properties in AsmJs.cpp, which would allow a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0015...