17 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-12999
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprint. CVE-2017-12999 Note that Nessus relies on the presence of the...
CVE-2024-12999 PHPGurukul Small CRM edit-user.php sql injection
A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...
CVE-2024-12999
CVE-2024-12999 affects PHPGurukul Small CRM 1.0. Affected component: /admin/edit-user.php where constructing or processing the id parameter enables SQL injection. Vulnerability can be exploited remotely and has been disclosed publicly. Impact is SQL-level data access/alteration as described in th...
CVE-2020-12999
This CVE entry is rejected/not used per the description.
SUSE SLES11 Security Update : tcpdump (SUSE-SU-2019:14191-1)
The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14191-1 advisory. - The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen. CVE-2017-12893 - Several protocol parsers in tcpdum...
CVE-2019-12999
Lightning Network Daemon lnd before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control...
CVE-2019-12999
Lightning Network Daemon lnd before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control...
CVE-2019-12999
The CVE-2019-12999 issue affects the Lightning Network Daemon (lnd) up to version 0.7 (pre-0.7). The root cause is Incorrect/ Improper Access Control, enabling attackers to trigger loss of funds. Public document sets (GHSA-78HJ-86CR-6J2V and OSV entries) corroborate an access-control weakness in ...
Zoho ManageEngine Desktop Central Arbitrary File Deletion (CVE-2018-12999)
An arbitrary file deletion vulnerability exists in Zoho ManageEngine Desktop Central. The vulnerability is due to insufficient input validation in requests handled by AgentTrayIconServlet...
CVE-2018-12999
CVE-2018-12999 affects Zoho ManageEngine Desktop Central 10.0.255. The issue is an incorrect access control in AgentTrayIconServlet that lets an attacker delete files on the web server without authentication by sending a crafted request containing computerName=../ to the /agenttrayicon URI. This ...
openSUSE Security Update : tcpdump (openSUSE-2017-1205)
This update for tcpdump to version 4.9.2 fixes several issues. These security issues were fixed : - CVE-2017-11108: Prevent remote attackers to cause DoS heap-based buffer over-read and application crash via crafted packet data. The crash occured in the EXTRACT16BITS function, called from the...
SUSE SLED12 / SLES12 Security Update : tcpdump (SUSE-SU-2017:2854-1)
This update for tcpdump to version 4.9.2 fixes several issues. These security issues were fixed : - CVE-2017-11108: Prevent remote attackers to cause DoS heap-based buffer over-read and application crash via crafted packet data. The crash occured in the EXTRACT16BITS function, called from the...
CVE-2017-12999
tcpdump contains a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print) affecting the tcpdump project; CVE-2017-12999 is documented in multiple advisories. Publicly disclosed details show the issue exists in tcpdump prior to version 4.9.2 and has been addressed by upgrading to tcpdum...
CVE-2017-12999
The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprint...
CVE-2017-12999
The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprint...
Debian: Security Advisory (DSA-3971-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...