Debian: Security Advisory (DLA-2208-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2208-1] wordpress security update

Package : wordpress Version : 4.1.30+dfsg-0+deb8u1 CVE ID : CVE-2020-11026 CVE-2020-11027 CVE-2020-11028 CVE-2020-11029 Debian Bug : 959391 Multiple CVEs were discovered in the src:wordpress package. CVE-2020-11026 Files with a specially crafted name when uploaded to the Media section can lead to...

CVE-2020-11029

In affected versions of WordPress, a vulnerability in the stats method of class-wp-object-cache.php can be exploited to execute cross-site scripting XSS attacks. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release 5.3.3, 5.2.6, 5.1.5, 5.0.9,...

CVE-2020-11029

CVE-2020-11029 affects WordPress; vulnerability in the stats() method of class-wp-object-cache.php allows cross-site scripting (XSS). Affected versions include 3.7.x through 5.3.x (and earlier releases) with a patch in WordPress 5.4.1 and via 5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4....

CVE-2016-11029

creationtimestamp| type| source ---|---|--- 2020-04-07 19:18:28+00:00| seen| https://t.me/cibsecurity/11079...

CVE-2016-11029

CVE-2016-11029 affects Samsung mobile devices on L(5.0/5.1), M(6.0), and N(7.0). The vulnerability arises from an unprotected intent that allows attackers to read the Mobile Hotspot password from logs. The description in multiple sources confirms the root cause and the impact: disclosure of hotsp...

CVE-2019-11029

CVE-2019-11029 affects Mirasys VMS before V7.6.1 and 8.x before V8.3.2. It arises from mishandling the Download() method of AutoUpdateService in SMServer.exe, enabling Directory Traversal via the ..\ path to enumerate and download files without authentication (e.g., SAM backups, Web.config). The ...

CVE-2019-11029

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use ..\ with this method to iterate over lists of interesting system files and download them without previous authentication. This...

CVE-2019-11029

creationtimestamp| type| source ---|---|--- 2019-06-28 08:00:26+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuuksia-mirasys-vms-videohallintaratkaisussa...

CVE-2018-1455

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 11029...

CVE-2017-11029

The CVE-2017-11029 issue is a Qualcomm Camera elevation vulnerability in Android on MSM devices. The vulnerability stems from the Camera CPP module Linux driver directly accessing a user-space buffer, with an unchecked ioctl_ptr->len used to copy data into a kernel buffer, enabling kernel memo...

Fedora Core 10 FEDORA-2009-11029 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-11029. OpenVAS Vulnerability Test $Id: fcore200911029.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11029 expat Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-11029 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-11029. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...