35 matches found
CVE-2026-16745
The CVE-2026-16745 entry concerns odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI). The root cause is an incorrect network binding that allows a malicious actor inside the cluster to bypass authentication and impersonate any user by presenting an arbitrary access token. Th...
CVE-2026-16745
A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI RHOAI. Due to incorrect network binding, a malicious actor within the cluster can bypass authentication and impersonate any user by providing an arbitrary access token. This allows an attacker to gain unauthorize...
CVE-2019-16745
eBrigade before 5.0 has evenementchoice.php chxCal SQL Injection...
Linux Distros Unpatched Vulnerability : CVE-2018-16745
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in mgetty before 1.2.1. In faxnotifymail in faxrec.c, the mailto parameter is not sanitized. It could allow a buffer overflow if long...
RHEL 5 : mgetty (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - mgetty: command injection in faxrunq CVE-2018-16741 - mgetty: Stack-based buffer overflow in faxnotifymai...
RHEL 7 : mgetty (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - mgetty: command injection in faxrunq CVE-2018-16741 - mgetty: Stack-based buffer overflow in faxnotifymai...
RHEL 6 : mgetty (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - mgetty: command injection in faxrunq CVE-2018-16741 - mgetty: Stack-based buffer overflow in faxnotifymai...
RHEL 5 : mgetty (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - mgetty: command injection in faxrunq CVE-2018-16741 - mgetty: Stack-based buffer overflow in faxnotifymai...
Mageia: Security Advisory (MGASA-2018-0402)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-16745
CVE-2020-16745 is rejected/not used; this entry does not represent an active vulnerability.
Huawei EulerOS: Security Advisory for mgetty (EulerOS-SA-2020-2368)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for mgetty (EulerOS-SA-2020-2257)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for mgetty (EulerOS-SA-2020-2140)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-16745
eBrigade before 5.0 has evenementchoice.php chxCal SQL Injection...
CVE-2019-16745
CVE-2019-16745 affects eBrigade prior to version 5.0, where SQL injection exists in evenement_choice.php chxCal. The vulnerability stems from unvalidated inputs in the SQL statements, enabling unauthorized manipulation of the database. Red Hat and CNVD entries corroborate the issue, and a public ...
eBrigade SQL Injection
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple SQL Injection vulnerabilities product: eBrigade vulnerable version: =5.0 CVE number: CVE-2019-16743, CVE-2019-16744, CVE-2019-16745 impact: critical homepage:...
openSUSE Security Update : mgetty (openSUSE-2019-737)
This update for mgetty fixes the following issues : - CVE-2018-16741: The function doactivate did not properly sanitize shell metacharacters to prevent command injection bsc1108752. - CVE-2018-16745: The mailto parameter was not sanitized, leading to a buffer overflow if long untrusted input...
SUSE SLED15 / SLES15 Security Update : mgetty (SUSE-SU-2018:2894-1)
This update for mgetty fixes the following issues : CVE-2018-16741: The function doactivate did not properly sanitize shell metacharacters to prevent command injection bsc1108752. CVE-2018-16745: The mailto parameter was not sanitized, leading to a buffer overflow if long untrusted input reached ...
Updated mgetty packages fix security vulnerabilities
Updated mgetty packages fix security vulnerabilities: The function doactivate did not properly sanitize shell metacharacters to prevent command injection CVE-2018-16741. Stack-based buffer overflow that could have been triggered via a command-line parameter CVE-2018-16742. The command-line...