112 matches found
1508-cli (>=1.0.4 <=1.0.6), 40banner (>=1.0.0 <=1.1.2) +4524 more potentially affected by CVE-2022-25860 via simple-git (>=0.10.0 <=3.15.1)
simple-git NPM version =0.10.0, =1.0.4, =1.0.0, =0.0.80, =1.0.0, =2.0.0, =0.0.0, =0.0.1, =0.0.1, =0.0.5, =0.0.5, =0.0.5, =0.0.5, =0.0.5, =0.1.16 and more Source cves: CVE-2022-25860 Source advisory: OSV:GHSA-9W5J-4MWV-2WJ8...
CVE-2022-1508 affecting package kernel 5.10.134.1-2
CVE-2022-1508 affecting package kernel 5.10.134.1-2. A patched version of the package is available...
CVE-2022-1508
creationtimestamp| type| source ---|---|--- 2022-08-31 20:37:24+00:00| seen| https://t.me/cibsecurity/49130...
CVE-2022-1508
The CVE-2022-1508 entry describes an out-of-bounds read in the Linux kernel io_uring module triggered by certain parameters to io_read(), enabling a local user with low privileges and no user interaction to read memory out of bounds. The provided data notes a MEDIUM base score (6.1, CVSS 3.1) wit...
Vulnerability Spotlight: Use-after-free condition in Google Chrome WebGPU
Piotr Bania of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered an exploitable use-after-free vulnerability in Google Chrome’s WebGPU standard. Google Chrome is a cross-platform web browser — and Chromium is the open-source version of the browser tha...
CVE-2022-1508
An out-of-bounds read flaw was found in the Linux kernel’s iouring module in the way a user triggers the ioread function with some special parameters. This flaw allows a local user to read some memory out of bounds...
Amazon Linux AMI : bind (ALAS-2021-1508)
The version of bind installed on the remote host is prior to 9.8.2-0.68.rc1.87. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1508 advisory. A flaw was found in bind. The way DNAME records are processed may trigger the same RRset to the ANSWER section to be added mo...
SUSE: Security Advisory (SUSE-SU-2014:0418-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1508
Cisco SD-WAN vManage Software is affected by multiple CVEs (CVE-2021-1508 among them) that could allow an unauthenticated, remote attacker to execute arbitrary code or access sensitive information, or a authenticated, local attacker to gain elevated privileges. The issue affects the vManage web i...
Critical Flaws Hit Cisco SD-WAN vManage and HyperFlex Software
Networking equipment major Cisco has rolled out software updates to address multiple critical vulnerabilities impacting HyperFlex HX and SD-WAN vManage Software that could allow an attacker to perform command injection attacks, execute arbitrary code, and gain access to sensitive information. In ...
SUSE: Security Advisory (SUSE-SU-2016:1508-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2 : doxygen (ALAS-2020-1508)
The version of doxygen installed on the remote host is prior to 1.8.5-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1508 advisory. Insufficient sanitization of the query parameter in templates/html/searchopensearch.php could lead to reflected cross-site scriptin...
CVE-2020-1508
CVE-2020-1508 affects Windows Media Audio Decoder and is described as a remote code execution vulnerability. The connected document (AVLEONOV article) lists Windows Media Audio Decoder as vulnerable under the September 2020 Patch Tuesday with multiple CVEs, including CVE-2020-1508, indicating an ...
KB4577070: Windows Server 2008 September 2020 Security Update
The remote Windows host is missing security update 4577070 or cumulative update 4577064. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...
KB4577053: Windows 7 and Windows Server 2008 R2 September 2020 Security Update
The remote Windows host is missing security update 4577053 or cumulative update 4577051. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...
CentOS 6 : java-1.7.0-openjdk (RHSA-2020:1508)
The remote CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1508 advisory. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are Java SE:...
Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2020-1508)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1508 advisory. 1:1.7.0.261-2.6.22.1.0.1 - Update DISTRONAME in specfile 1:1.7.0.261-2.6.22.1 - Add release notes from IcedTea. - Resolves: rhbz1810557...
RHEL 6 : java-1.7.0-openjdk (RHSA-2020:1508)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1508 advisory. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Security...
