Debian: Security Advisory (DSA-1880-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : ant (ALAS-2022-1880)

The version of ant installed on the remote host is prior to 1.9.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1880 advisory. When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memor...

org.apache.activemq.tooling:maven-activemq-memtest-plugin (4.1.2), org.apache.activemq.tooling:maven-activemq-perf-plugin (4.1.2) +67 more potentially affected by CVE-2013-1880 via org.apache.activemq:activemq-core (4.1.2)

org.apache.activemq:activemq-core MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-core and may be impacted: - org.apache.activemq.tooling:maven-activemq-memtest-plugin 4.1.2 -...

com.evasion:plugin-junit (>=1.0.0.1, <=1.0.0.4), com.webtide.hightide:auctiondemo (>=6.1h.4-beta, <=6.1h.7) +152 more potentially affected by CVE-2013-1880 via org.apache.activemq:activemq-core (4.1.1)

org.apache.activemq:activemq-core MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-core and may be impacted: - com.evasion:plugin-junit =1.0.0.1, =6.1h.4-beta, =6.1h.4-beta, =6.1h.4-beta, =6.1h.4-beta,...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.message:cloud-altemistafwk-core-message-active-conf (>=3.0.0.release, <=3.1.0.release) +659 more potentially affected by CVE-2013-1880 via org.apache.activemq:activemq-core (>=5.0.0, <=5.7.0)

org.apache.activemq:activemq-core MAVEN version =5.0.0, =3.0.0.release, =1.0, =1.0.0, =1.0.0, =0.4.2, =0.4.2, =0.4.2, =3.0.0.rc1, =3.0.0.rc1, =3.0.0.rc1, =3.0.0.rc1, =3.2.1 and more Source cves: CVE-2013-1880 Source advisory: OSV:GHSA-C9GX-27HQ-WCVJ...

AlmaLinux 8 : ibus and glib2 (ALSA-2020:1880)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:1880 advisory. - A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to...

CVE-2021-1880

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1880

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1880

CVE-2021-1880 affects macOS Big Sur ImageIO: processing a maliciously crafted image may lead to arbitrary code execution. Fixed in macOS Big Sur 11.3 and watchOS 7.4. Documentation confirms the vulnerability and patch target, but deeper root-cause details are not provided beyond ImageIO handling ...

SUSE SLES12 Security Update : shim (SUSE-SU-2021:1880-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:1880-1 advisory. - Update to the unified shim binary for SBAT support bsc1182057 - shim-install: Always assume 'removable' for Azure to avoid the endless res...

RHEL 8 : ibus and glib2 (RHSA-2020:1880)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1880 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the...

CVE-2020-1880

The CVE-2020-1880 vulnerability affects Huawei smartphone Lion-AL00C on versions earlier than 10.0.0.205(C00E202R7P2). An attacker could cause a denial of service by delivering a specially crafted file due to insufficient input validation when executing the file, potentially leading to device abn...

Security Advisory - Denial of Service Vulnerability on Huawei Smartphone

There is an denial of service vulnerability on some Huawei smartphone. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file, successful exploit may cause device abnormal. Vulnerability ID: HWPSIRT-2019-12057 This...

Advantech WISE-PaaS/RMM NodeRed Server Missing Authentication Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WISE-PaaS/RMM. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NodeRed Server, which listens on TCP port 1880 by default. The issue resul...

CentOS Update for curl CESA-2019:1880 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-1880

CVE-2019-1880 concerns the BIOS upgrade utility in Cisco UCS C-Series Rack Servers. The issue stems from insufficient validation of the BIOS firmware image file, enabling an authenticated, local attacker to run the upgrade with specific options and bypass the firmware signature-verification proce...

Security Bulletin: Security vulnerabilities in ActiveMQ 5.2.0 affect IBM Sterling B2B Integrator (CVE-2015-1830, CVE-2014-8110, CVE-2013-3060, CVE-2013-1880, CVE-2013-1879, CVE-2012-6551, CVE-2012-6092, CVE-2010-1587, CVE-2010-1244, CVE-2010-0684)

Summary Multiple directory traversal, cross-site scripting, denial of service and cross-site request forgery security vulnerabilities in ActiveMQ 5.2.0. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1830 DESCRIPTION: Apache ActiveMQ could all...

CVE-2017-1880

This CVE-2017-1880 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-1880

...

CVE-2016-1880

The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "handling of Linux futex robust lists."...