168 matches found
RDP: a Double-Edged Sword for IT Teams – Essential Yet Exploitable
Remote Desktop Protocol RDP is an amazing technology developed by Microsoft that lets you access and control another computer over a network. It's like having your office computer with you wherever you go. For businesses, this means IT staff can manage systems remotely, and employees can work fro...
Security Bulletin: IBM Storage Protect Server is susceptible to multiple vulnerabilities due to key-value store "etcd". (CVE-2018-1098, CVE-2018-1099, CVE-2022-34038, CVE-2021-2823).
Summary The distributed key-value store, etcd, used by IBM Storage Protect Server is vulnerable to cross-site scripting, denial of service, or unauthorized access to the host system. This bulletin outlines the steps to address these vulnerabilities. Vulnerability Details CVEID:CVE-2018-1098...
Photon OS 4.0: Calico PHSA-2023-4.0-0427
An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0427. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Coredns PHSA-2023-4.0-0420
An update of the coredns package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0420. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
RHEL 7 : etcd (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - etcd: Cross-site request forgery via crafted local POST forms CVE-2018-1098 - etcd: Information discosure...
CVE-2024-1098
creationtimestamp| type| source ---|---|--- 2024-01-31 13:32:20+00:00| seen| https://t.me/ctinow/176715 2024-02-05 23:16:10+00:00| seen| https://t.me/ctinow/179578 2024-02-22 13:12:27+00:00| seen| https://t.me/ctinow/190698...
CVE-2024-1098
The CVE-2024-1098 entry describes a vulnerability in Rebuild up to version 3.5.5 affecting the function QiniuCloud.getStorageFile in the file /filex/proxy-download. The issue arises from manipulation of the url argument, which can cause information disclosure. The exploit has been disclosed publi...
CVE-2024-1098 Rebuild proxy-download QiniuCloud.getStorageFile information disclosure
A vulnerability was found in Rebuild up to 3.5.5 and classified as problematic. This issue affects the function QiniuCloud.getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to information disclosure. The exploit has been disclosed to the public and may b...
Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2024-1098)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GitLab < 15.8.5 (SECURITY-RELEASE-GITLAB-15-10-1-RELEASED)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A...
CVE-2023-1098
CVE-2023-1098 is an information disclosure vulnerability in GitLab EE/CE that allows an admin to leak passwords from repository mirror configuration. Affected versions are GitLab releases starting from 11.5 up to 15.8.5, from 15.9 up to 15.9.3, and from 15.10 up to 15.10.1. The issue is documente...
CVE-2023-1098
Removed by vendor...
GitLab 11.5 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-1098)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions startin...
Security Bulletin: CVE-2018-1099, CVE-2018-1098 may affect IBM CICS TX Advanced
Summary CVE-2018-1099, CVE-2018-1098 related to etcd package may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2018-1099 DESCRIPTION: etcd could allow a remote attacker to gain access to the DNS records, caused by a DNS...
NewStart CGSL MAIN 6.02 : logrotate Multiple Vulnerabilities (NS-SA-2022-0095)
The remote NewStart CGSL host, running version MAIN 6.02, has logrotate packages installed that are affected by multiple vulnerabilities: - Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before th...
NewStart CGSL CORE 5.05 / MAIN 5.05 : logrotate Multiple Vulnerabilities (NS-SA-2022-0037)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has logrotate packages installed that are affected by multiple vulnerabilities: - Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a fi...
CVE-2022-1098
Delta Electronics DIAEnergie (all versions prior to 1.9) is affected by CVE-2022-1098 through Uncontrolled Search Path Element (DLL hijacking). The root cause is DLL loading order/search path allowing privilege escalation when paired with the Incorrect Default Permissions issue; CVSSv3 base score...
Delta Electronics DIAEnergie (Update C)
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: DIAEnergie Vulnerabilities: Path Traversal, Incorrect Default Permissions, SQL Injection, Uncontrolled Search Path Element 2. UPDATE INFORMATION This updated advisory is a...
NewStart CGSL CORE 5.04 / MAIN 5.04 : logrotate Multiple Vulnerabilities (NS-SA-2021-0108)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has logrotate packages installed that are affected by multiple vulnerabilities: - Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a fi...