144 matches found
Photon OS 5.0: Mysql PHSA-2024-5.0-0194
An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0194. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Cifs PHSA-2022-4.0-0194
An update of the cifs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0194. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Go PHSA-2022-4.0-0194
An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0194. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid203410...
RHEL 5 : ricci (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ricci: Cluster Configuration System css tool ignores invalid passwords after a successful authentication...
CVE-2024-0194
creationtimestamp| type| source ---|---|--- 2024-01-02 22:26:51+00:00| seen| https://t.me/ctinow/162055 2024-01-03 01:37:18+00:00| seen| https://t.me/cibsecurity/74201 2024-01-08 23:17:32+00:00| seen| https://t.me/ctinow/164704 2024-01-22 18:41:26+00:00| seen| https://t.me/ctinow/171353...
CVE-2024-0194
CodeAstro Internet Banking System up to version 1.0 is affected by CVE-2024-0194 in the Profile Picture Handler component (pages_account.php). The vulnerability enables unrestricted file upload and may be exploited remotely. Multiple connected sources confirm the issue and the presence of an expl...
Rocky Linux 9 : java-17-openjdk (RLSA-2023:0194)
The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0194 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected...
Debian DSA-5503-1 : netatalk - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5503 advisory. Multiple security issues were discovered in Netatalk, an implementation of the Apple Filing Protocol AFP for offering file service mainly to macOS clients, which...
[SECURITY] [DSA 5503-1] netatalk security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5503-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 20, 2023 https://www.debian.org/security/faq -...
USN-6146-1: Netatalk vulnerabilities
It was discovered that Netatalk did not properly validate the length of user-supplied data in the DSI structures. A remote attacker could possibly use this issue to execute arbitrary code with the privileges of the user invoking the programs. This issue only affected Ubuntu 20.04 LTS and Ubuntu...
[SECURITY] [DLA 3426-1] netatalk security update
Debian LTS Advisory DLA-3426-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 17, 2023 https://wiki.debian.org/LTS Package : netatalk Version : 3.1.12ds-3+deb10u1 CVE ID : CVE-2021-31439 CVE-2022-0194 CVE-2022-23121 CVE-2022-23122 CVE-2022-23123 CVE-2022-2312...
CVE-2023-0194
creationtimestamp| type| source ---|---|--- 2023-04-01 12:22:59+00:00| seen| https://t.me/cibsecurity/61299...
CVE-2023-0194
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer driver, where an invalid display configuration may lead to denial of service...
CVE-2023-0194
The CVE-2023-0194 entry concerns the NVIDIA GPU Display Driver for Windows and Linux, where the kernel mode layer driver may mishandle an invalid display configuration, potentially causing denial of service. The available connected documents corroborate a kernel-mode vulnerability in the Windows/...
CVE-2022-0194
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...
CVE-2022-0194
Netatalk (vulnerable component: ad_addcomment) is affected by CVE-2022-0194. The flaw stems from improper validation of user-supplied data length before copying into a fixed-size stack buffer, enabling an unauthenticated attacker to execute arbitrary code with root privileges on affected installa...
CVE-2022-0194
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...
K32037442: Intel In-Band Manageability software vulnerabilities CVE-2021-0193, CVE-2021-0194, and CVE-2021-33108
Security Advisory Description CVE-2021-0193 Improper authentication in the IntelR In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access. CVE-2021-0194 Improper access control in the IntelR In-Band...
Updated netatalk packages fix security vulnerability
Heap overflow leading to arbitrary code execution. CVE-2021-31439 Buffer overflow leading to remote code execution CVE-2022-0194 Improper length validation leading to remote code execution CVE-2022-23121 Buffer overflow leading to remote code execution CVE-2022-23122 Out-of-bounds read leading to...
AlmaLinux 9 : java-17-openjdk (ALSA-2023:0194)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0194 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected a...