165 matches found
KLA77143 Multiple vulnerabilities in PostgreSQL
Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability can be exploited remotely to gain...
SUSE: Security Advisory (SUSE-SU-2017:2244-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-10979
GitLab EE/CE versions 11.10–12.9 expose restricted CI pipeline metrics to unauthorized users. Root cause described as an information disclosure vulnerability in these releases. Impact is information leakage, not integrity or availability. Remediation per linked advisories is to upgrade to a fixed...
CVE-2016-10979
The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS...
CVE-2016-10979
The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS...
CVE-2016-10979
The CVE-2016-10979 entry concerns the fossura-tag-miner WordPress plugin prior to version 1.1.5, which is vulnerable to Cross-Site Scripting (XSS). Root cause is an XSS flaw in the plugin that could affect site users; the vulnerability is documented across multiple sources (NVD, Red Hat and CVE l...
NewStart CGSL MAIN 4.05 : freeradius Multiple Vulnerabilities (NS-SA-2019-0107)
The remote NewStart CGSL host, running version MAIN 4.05, has freeradius packages installed that are affected by multiple vulnerabilities: - An out-of-bounds read flaw was found in the way FreeRADIUS server handled decoding of DHCP packets. A remote attacker could use this flaw to crash the...
CVE-2019-10979
CVE-2019-10979 affects SICK MSC800 firmware all versions prior to 4.0. The vulnerability is caused by a hard-coded customer account password, enabling a remote attacker with network access to potentially reconfigure settings or disrupt device functionality. CVSSv3 base score 9.8 (CRITICAL); attac...
About the security content of macOS Server 5.4 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
About the security content of macOS Server 5.4
About the security content of macOS Server 5.4 This document describes the security content of macOS Server 5.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
SUSE SLES11 Security Update : freeradius-server (SUSE-SU-2017:2244-1)
This update for freeradius-server fixes the following issues: Security issues fixed : - CVE-2017-10981: DHCP - Fix memory leak in frdhcpdecode. bnc1049086 - CVE-2017-10982: Fix buffer over-read in frdhcpdecodeoptions. bsc1049086 - CVE-2017-10983: Fix read overflow when decoding option 63...
Debian DSA-3930-1 : freeradius - security update
Guido Vranken discovered that FreeRADIUS, an open source implementation of RADIUS, the IETF protocol for AAA Authorisation, Authentication, and Accounting, did not properly handle memory when processing packets. This would allow a remote attacker to cause a denial-of-service by application crash,...
[SECURITY] [DSA 3930-1] freeradius security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3930-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 10, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3930-1] freeradius security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3930-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 10, 2017 https://www.debian.org/security/faq -...
Important: freeradius
Issue Overview: Out-of-bounds read in frdhcpdecodeoptions: An out-of-bounds read flaw was found in the way FreeRADIUS server handles decoding of DHCP packets. A remote attacker could use this flaw to crash the FreeRADIUS server by sending a specially crafted DHCP request. CVE-2017-10982...
CentOS 6 : freeradius (CESA-2017:1759)
An update for freeradius is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
freeradius security update
CentOS Errata and Security Advisory CESA-2017:1759 An update for freeradius is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Scientific Linux Security Update : freeradius on SL6.x i386/x86_64 (20170718)
Security Fixes : - An out-of-bounds write flaw was found in the way FreeRADIUS server handled certain attributes in request packets. A remote attacker could use this flaw to crash the FreeRADIUS server or to execute arbitrary code in the context of the FreeRADIUS server process by sending a...
RHEL 6 : freeradius (RHSA-2017:1759)
An update for freeradius is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
freeradius security update
2.2.6-7 - Resolves: Bug1469115 CVE-2017-10979 freeradius: Out-of-bounds write in radcoalesce - Resolves: Bug1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write due to improper output buffer size check in makesecret - Resolves: Bug1469120 CVE-2017-10980 freeradius: Memory leak in decodetlv...