RHEL 8 : libreswan (RHSA-2022:0239)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:0239 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both...

CVE-2022-0239

corenlp is vulnerable to Improper Restriction of XML External Entity Reference...

CVE-2022-0239

The CVE-2022-0239 entry pertains to Stanford CoreNLP (corenlp) with an XML External Entity (XXE) processing flaw. Root cause: SchemaFactory is created without secure processing enabled and is used to validate XML against a schema, enabling XXE when processing malicious XML. Impact (per public rec...

CVE-2022-0239 Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp

corenlp is vulnerable to Improper Restriction of XML External Entity Reference...

Samba 4.0.0 <= 4.0.17 Improper Input Validation Vulnerability (CVE-2014-0239)

Potential DOS in Samba internal DNS server. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-0239

In Juniper Networks Junos OS Evolved, a vulnerability (CVE-2021-0239) exists where a continuous stream of specific genuine Layer 2 frames can cause the AFT manager process (Evo-aftmand) to crash and restart the packet forwarding engine (PFE), resulting in a Denial of Service. Affected: Junos OS E...

CVE-2020-0239

creationtimestamp| type| source ---|---|--- 2020-08-12 00:55:45+00:00| seen| https://t.me/cibsecurity/14073...

CVE-2020-0239

CVE-2020-0239 affects the Android Framework (DocumentsContract.java) and describes a permissions bypass that can disclose location metadata from files (e.g., photos) via a local information disclosure flaw. The vulnerability is rooted in getDocumentMetadata, enabling a local attacker to access lo...

Cisco IOS XE Software Web UI Command Injection (cisco-sa-webui-cmdinj-zM283Zdw)

According to its self-reported version, Cisco IOS XE Software is affected by a Web UI Command Injection vulnerability. The vulnerability exists in the web-based user interface due to improper validation of specific HTTP requests. An authenticated, remote attacker can exploit this, to inject IOS...

Cisco IOS Software Simple Network Management Protocol DoS (cisco-sa-snmp-dos-USxSyTk5)

According to its self-reported version, IOS is affected by a vulnerability in the Simple Network Management Protocol SNMP subsystem due to insufficient input validation when the software processes specific SNMP object identifiers. An authenticated, remote attacker can exploit this, by sending a...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2016-1026)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2019-0239

Updates of 'elfutils', 'binutils', 'krb5', 'nss', 'go', 'kubernetes', 'mesos' packages of Photon OS have been released...

Privilege Escalation

The kernel packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way Linux kernel's Transparent Huge Pages THP implementation handled non-huge page migration. A local, unprivileged user could use this flaw to crash the kernel by migrating transparent...

CVE-2018-0239

creationtimestamp| type| source ---|---|--- 2018-12-31 07:31:23+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/cisco-korjasi-kriittisia-haavoittuvuuksia 2025-03-31 05:00:07+00:00| published-proof-of-concept| Telegram/Tf7RAmO5ucsEOjBgsAIXqXRYfzXLNzHzE3kkLB18s4bauF0 2025-04-12 21:02:13+00:0...

Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by Improper Authorization Vulnerability (CVE-2016-0239)

Summary IBM Security Guardium Database Activity Monitor could allow a remote authenticated attacker to issue a specially HTTP request as administrator. Vulnerability Details CVEID: CVE-2016-0239 DESCRIPTION: IBM Security Guardium Database Activity Monitor could allow a remote authenticated attack...

Cisco ASR StarOS Interface Forwarding Denial of Service Vulnerability (cisco-sa-20180418-staros)

According to its self-reported version and model number, the remote Cisco ASR device is affected by a denial of service vulnerability. Please see the included Cisco BID and the Cisco Security Advisory for more information. TRUSTED...

CVE-2018-0239

The CVE-2018-0239 issue affects Cisco ASR 5700 Series devices and VPC System Software running StarOS. It stems from improper verification of transmitted packet length against NIC maximums in the egress path, allowing unauthenticated remote attackers to trigger an Interface Forwarding Denial of Se...

Solaris 10 (x86) : 120190-23

StarSuite 8 Solarisx86: Update 18. Date this patch was last updated by Sun : Mar/15/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 120189-23

StarSuite 8 Solaris: Update 18. Date this patch was last updated by Sun : Mar/15/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Remote code execution

A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-0228, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235,...