Lucene search
K

29 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:16 a.m.3 views

CVE-2017-15909

D-Link DGS-1500 Ax devices before 2.51B021 have a hardcoded password, which allows remote attackers to obtain shell access...

9.8CVSS7.1AI score0.00698EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2018-15909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to...

7.8CVSS7.5AI score0.02086EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2023/02/21 6:33 p.m.39 views

K24803507: Ghostscript vulnerability CVE-2018-15909

Security Advisory Description In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code. CVE-2018-15909 Impact There is no impact; F5 products a...

7.8CVSS7.6AI score0.02086EPSS
Exploits0
Circl
Circl
added 2020/10/19 4:46 p.m.2 views

CVE-2020-15909

creationtimestamp| type| source ---|---|--- 2020-10-19 16:46:08+00:00| seen| https://t.me/cibsecurity/15365...

8.8CVSS8.2AI score0.01403EPSS
Exploits1References1
CVE
CVE
added 2020/10/19 12:57 p.m.36 views

CVE-2020-15909

SolarWinds N-central up to 2020.1 is described as vulnerable to session hijacking via the JSESSIONID cookie. The JSESSIONID attribute is not validated against multiple sources (e.g., source IP, MFA claims) while the victim remains logged in, allowing an attacker to steal the cookie and reuse it b...

8.8CVSS8.3AI score0.01403EPSS
Exploits1References2Affected Software1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.30 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2019-1016)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.9181EPSS
Exploits8References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2019-1205)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.10504EPSS
Exploits7References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.34 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2018-1412)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.10504EPSS
Exploits7References2
Oracle linux
Oracle linux
added 2019/08/13 12:0 a.m.46 views

ghostscript security, bug fix, and enhancement update

9.25-2 - obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel 9.25-1 - Rebase to latest upstream version bug 1636115 - Resolves: 1673399 - CVE-2019-3839 ghostscript: missing attack vector protections for CVE-2019-6116 - Resolves: 1678172 - CVE-2019-3835 ghostscript: superexec...

9.8CVSS0.1AI score0.9181EPSS
Exploits13
Tenable Nessus
Tenable Nessus
added 2019/04/09 12:0 a.m.29 views

EulerOS Virtualization 2.5.3 : ghostscript (EulerOS-SA-2019-1205)

According to the versions of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was discovered that the ghostscript .tempfile function did not properly handle file permissions. An attacker could possibl...

9.8CVSS7.6AI score0.10504EPSS
Exploits7References15
Tenable Nessus
Tenable Nessus
added 2019/03/27 12:0 a.m.35 views

openSUSE Security Update : ghostscript (openSUSE-2019-759)

This update for ghostscript to version 9.25 fixes the following issues : These security issues were fixed : - CVE-2018-17183: Remote attackers were be able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code bsc1109105 - CVE-2018-15909: Prevent type...

9.3CVSS7AI score0.9181EPSS
Exploits5References33
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:0 a.m.40 views

Fedora 29 : ghostscript (2018-81ee973d7c)

This is a security update for CVE-2018-16802. It also fixes a printing problem discovered in one of the previous CVE fixes. NOTE: Please, be advised that there's a separate issue related to printing problems, which is connected to CUPS itself, meaning this update might not completely resolve your...

7.8CVSS6.6AI score0.02248EPSS
Exploits4References10
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:0 a.m.30 views

Fedora 28 : ghostscript (2018-56221eb24b)

This is a rebase to latest upstream version of Ghostscript, which fixes several high important CVEs recently discovered. It is advised to update this version as soon as possible. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update syste...

7.8CVSS6.5AI score0.02248EPSS
Exploits1References9
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:0 a.m.42 views

Fedora 28 : ghostscript (2018-07083800ac)

Security fix for CVE-2018-15909 and some other bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

7.8CVSS7.4AI score0.02086EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2018/12/18 12:0 a.m.27 views

CentOS Update for ghostscript CESA-2018:3650 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.02086EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2018/12/14 12:0 a.m.39 views

CentOS 7 : ghostscript (CESA-2018:3650)

An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

7.8CVSS6.8AI score0.02086EPSS
Exploits0References5
Cent OS
Cent OS
added 2018/12/13 8:45 p.m.131 views

ghostscript security update

CentOS Errata and Security Advisory CESA-2018:3650 An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

7.8CVSS6.7AI score0.02086EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2018/11/28 12:0 a.m.33 views

Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20181127)

Security Fixes : - ghostscript: .tempfile file permission issues 699657 CVE-2018-15908 - ghostscript: shadingparam incomplete type checking 699660 CVE-2018-15909 - ghostscript: missing type check in type checker 699659 CVE-2018-16511 - ghostscript: incorrect access checking in temp file handling ...

7.8CVSS6.5AI score0.02086EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2018/11/27 1:27 a.m.224 views

Important: Red Hat Security Advisory: ghostscript security update

An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

7.8CVSS6.7AI score0.02086EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2018/11/27 12:0 a.m.32 views

Oracle Linux 7 : ghostscript (ELSA-2018-3650)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3650 advisory. - Resolves: 1621383 - CVE-2018-16511 ghostscript: missing type check in type checker 699659 - Resolves: 1621159 - CVE-2018-15908 ghostscript: .tempfile...

7.8CVSS6.8AI score0.02086EPSS
Exploits0References5
Rows per page
Query Builder