Fedora 31 : sympa (2020-9b6c969aac)

Update to sympa 6.2.56. Fixes CVE-2020-10936. For details, see : - https://github.com/sympa-community/sympa/releases/tag/6.2.56 - https://sympa-community.github.io/security/2020-002.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora upda...

CVE-2020-10936

creationtimestamp| type| source ---|---|--- 2020-05-27 22:55:16+00:00| seen| https://t.me/cibsecurity/12346 2024-10-24 17:40:51+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1174...

UBUNTU-CVE-2020-10936

Sympa before 6.2.56 allows privilege escalation...

CVE-2020-10936

Sympa before 6.2.56 allows privilege escalation...

CVE-2020-10936

CVE-2020-10936 affects Sympa (mailing list manager). Multiple advisories (Debian DSA-4818, Ubuntu USN-4442-2, OSV) confirm a local privilege-escalation flaw in Sympa related to improper handling of environment variables when a setuid context is involved, enabling root-level access in affected ins...

CVE-2020-10936

Sympa before 6.2.56 allows privilege escalation...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities (CVE-2018-1058, CVE-2018-10936, CVE-2019-9193)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerabilities 3 issues for Postgresql: 1 for a flaw in the searchpath setting2, 1 for a failure to check the host name if a host name verifier was not provided to the driver and...

Security Bulletin: IBM Security Information Queue uses database components with known vulnerabilities (CVE-2016-3506, CVE-2018-1058, CVE-2018-10936, CVE-2019-9193)

Summary IBM Security Information Queue ISIQ relies on older Oracle JDBC and PostgreSQL JAR files that have known vulnerabilities. As of v1.0.5, ISIQ switched to newer, secure versions of the JAR files. Vulnerability Details CVEID: CVE-2016-3506 DESCRIPTION: Unspecified vulnerability in the JDBC...

Siemens SIMATIC S7-1200 PLC UDP Denial of Service (CVE-2019-10936)

Binary data scadasiemenssimatics71200plcSSA-473245.nbin...

CVE-2016-10936

The CVE-2016-10936 entry relates to the WordPress WP-Polls plugin. Affected version: WP-Polls before 2.73.1. Root cause: insufficient input validation on the polls-options page, leading to cross-site scripting via the poll_bar_style parameter. Impact: remote attackers with admin access and user i...

Fedora 29 : postgresql-jdbc (2019-7d0d59764e)

new upstream version, to fix CVE-2018-10936 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

CVE-2018-10936

CVE-2018-10936 affects the PostgreSQL JDBC driver prior to 42.2.5. If an SSL Factory is provided and no host name verifier is configured, the driver might skip host name verification, enabling a MITM attacker to impersonate a trusted server with a CA-signed certificate. The risk is constrained to...

CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

CVE-2017-10936

ZTE ZXCDN-SNS is affected by an SQL injection in the aoData parameter. In versions prior to 4.01.01, a remote attacker can exploit improper input handling to execute arbitrary SQL commands, leading to disclosure of database contents. Root cause: unsafely crafted input in aoData enables SQL statem...

Fedora Update for maniadrive FEDORA-2012-10936

Check for the Version of maniadrive OpenVAS Vulnerability Test Fedora Update for maniadrive FEDORA-2012-10936 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for php FEDORA-2012-10936

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for maniadrive FEDORA-2012-10936

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...