Fedora 32 : 1:NetworkManager (2020-3857463d30)

Update to 1.22.14 release - ifcfg-rh: handle '802-1x.,phase2-ca-path' rhbz1841395, CVE-2020-10754 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2018-1218)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2018-1225)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2018-1338)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2018-1276)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : ncurses (SUSE-SU-2019:3094-1)

This update for ncurses fixes the following issues : Security issue fixed : CVE-2018-10754: Fixed a denial of service caused by a NULL pointer Dereference in the ncparseentry bsc1131830. CVE-2019-17594: Fixed a heap-based buffer over-read in ncfindentry function in tinfo/comphash.c bsc1154036...

CVE-2019-10754

CVE-2019-10754 affects Apereo CAS before release 6.1.0-RC5. The root cause is the use of apache commons-lang3’s RandomStringUtils for token and ID generation, whose PRNG is not cryptographically strong, making generated values predictable. This predictability can enable an attacker to infer token...

org.apereo.cas:cas-mgmt-api-configuration (>=6.1.0-RC2 <=6.1.0-RC4), org.apereo.cas:cas-mgmt-core-util (>=6.0.0-RC4 <=6.1.0-RC4) +197 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (>=6.0.0-RC4 <=6.1.0-RC4)

org.apereo.cas:cas-server-core-services-api MAVEN version =6.0.0-RC4, =6.1.0-RC2, =6.0.0-RC4, =6.0.0-RC4, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.1.0-RC4 and more Source cves: CVE-2019-10754 Source advisory: SNYK:JAVA-ORGAPEREOCAS-468868...

CVE-2016-10754

creationtimestamp| type| source ---|---|--- 2019-05-24 18:48:35+00:00| seen| https://t.me/cvemitreorg/325 2019-05-24 22:26:21+00:00| seen| https://t.me/cibsecurity/4539...

CVE-2016-10754

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

CVE-2016-10754

CVE-2016-10754 affects Vtiger CRM 6.5.0, specifically the file modules/Calendar/Activity.php. The vulnerability is an SQL injection via the contactidlist parameter due to lack of validation of externally entered SQL statements. The documented impact is the ability to execute arbitrary SQL in the ...

Photon OS 1.0: Ncurses PHSA-2018-1.0-0164

An update of the ncurses package has been released. File data PhotonOSPHSA-2018-10-0164ncurses.nasl...

Fedora 28 : ncurses (2018-ed74f27aef)

Security fix for CVE-2018-10754. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. File data...

EulerOS Virtualization 2.5.0 : ncurses (EulerOS-SA-2018-1338)

According to the version of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A NULL pointer dereference was found in the way the ncparseentry function parses terminfo data for compilation. An attacker able to...

EulerOS Virtualization 2.5.2 : ncurses (EulerOS-SA-2018-1276)

According to the version of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A NULL pointer dereference was found in the way the ncparseentry function parses terminfo data for compilation. An attacker able to...

Photon OS 1.0: Ncurses / Strongswan PHSA-2018-1.0-0164 (deprecated)

An update of 'ncurses', 'strongswan' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0164. The text itself is copyright C...

EulerOS 2.0 SP3 : ncurses (EulerOS-SA-2018-1225)

According to the version of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A NULL pointer dereference was found in the way the ncparseentry function parses terminfo data for compilation. An attacker able to provide...

Low: ncurses

Issue Overview: A NULL pointer dereference was found in the way the ncparseentry function parses terminfo data for compilation. An attacker able to provide specially crafted terminfo data could use this flaw to crash the application parsing it.CVE-2018-10754 Affected Packages: ncurses Note: This...

EulerOS 2.0 SP2 : ncurses (EulerOS-SA-2018-1218)

According to the version of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A NULL pointer dereference was found in the way the ncparseentry function parses terminfo data for compilation. An attacker able to provide...

MGASA-2018-0299 Updated ncurses packages fix security vulnerability

A flaw was found in ncurses before 6.1.20180414 where a NULL Pointer Dereference in the ncparseentry function of tinfo/parseentry.c could lead to a remote denial of service if the terminfo library code is used to process untrusted terminfo data in which a use-name is invalid syntax CVE-2018-10754...