httpd:2.4 security update

httpd 2.4.37-64.0.1 - Replace index.html with Oracle's index page oracleindex.html 2.4.37-64 - Resolves: RHEL-14448 - httpd: modmacro: out-of-bounds read vulnerability CVE-2023-31122 2.4.37-63 - modxml2enc: fix media type handling Resolves: RHEL-14321 modhttp2 1.15.7-10 - Resolves: RHEL-29817 -...

RHEL 8 : httpd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - httpd: Use-after-free on HTTP/2 stream shutdown CVE-2018-1302 Note that Nessus has not tested for this issue but ha...

CVE-2024-1302

creationtimestamp| type| source ---|---|--- 2024-03-12 17:32:00+00:00| seen| https://t.me/ctinow/205892 2024-03-12 17:32:09+00:00| seen| https://t.me/ctinow/205900...

CVE-2024-1302 Multiple Vulnerabilities in Badger Meter's Monitool

Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier. A local attacker could change the application's file parameter to a log file obtaining all sensitive information such as database credentials...

CVE-2024-1302

CVE-2024-1302 affects Badger Meter Monitool up to version 4.6.3 and earlier. The vulnerability allows a local attacker to manipulate the application’s file parameter to point to a log file, leading to exposure of sensitive data such as database credentials. Documents consistently describe an info...

CVE-2024-1302 Multiple Vulnerabilities in Badger Meter's Monitool

Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier. A local attacker could change the application's file parameter to a log file obtaining all sensitive information such as database credentials...

Malicious code in wlwz-2312-1302 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 570aad10d0978c1e540b674905c55d67e5d17e139a4f032ace5630e5a963f4bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-289 Malicious code in wlwz-2312-1302 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 570aad10d0978c1e540b674905c55d67e5d17e139a4f032ace5630e5a963f4bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 16.04 ESM : libmodbus vulnerabilities (USN-5173-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5173-2 advisory. USN-5173-1 fixed vulnerabilities in libmodbus. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...

BELL-CVE-2018-1302 CVE-2018-1302 does not affect BellSoft software

Bulletin has no description...

CVE-2023-1302

creationtimestamp| type| source ---|---|--- 2023-03-10 00:20:37+00:00| seen| https://t.me/cibsecurity/59759...

CVE-2023-1302

A vulnerability, which was classified as problematic, was found in SourceCodester File Tracker Manager System 1.0. This affects an unknown part of the file normal/borrow1.php. The manipulation of the argument id with the input 1"alert1111 leads to cross site scripting. It is possible to initiate...

CVE-2023-1302

CVE-2023-1302 affects SourceCodester File Tracker Manager System 1.0, specifically the file normal/borrow1.php. The vulnerability is a cross-site scripting flaw caused by manipulating the id argument (example input: 1">), enabling remote initiation of the attack and with the exploit disclosed ...

Debian: Security Advisory (DSA-1302-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2014-1302

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1...

K11509465: Apache mod_http2 vulnerability CVE-2018-1302

Security Advisory Description When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usua...

CVE-2019-14462

An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUSFCWRITEMULTIPLECOILS case, aka VD-1302...

CVE-2022-1302

creationtimestamp| type| source ---|---|--- 2022-04-12 12:23:14+00:00| seen| https://t.me/cibsecurity/40595...

CVE-2022-1302

CVE-2022-1302 affects MZ Automation LibIEC61850 versions prior to 1.5.1. An unauthenticated attacker can craft a GOOSE message to cause a denial of service. Remediation: upgrade to LibIEC61850 1.5.1 or newer; as a temporary measure, restrict access to the affected service.

CVE-2022-1302 Malformed Goose Message in LibIEC61850 may result in a denial of service

In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service...