82 matches found
SUSE CVE-2007-1884
Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow context-dependent attackers to execute arbitrary code via 1 certain negative argument numbers that arise in the phpformattedprint function because of 64 to 32 bit...
Upgraded Q -> M from 336 [1666364078201]
Judge has assessed an item in Issue 336 as Medium risk. The relevant finding follows: Using transfer For Sending Ether Permalinks Description The transfer and send functions forward a fixed amount of 2300 gas. Historically, it has often been recommended to use these functions for value transfers ...
Transfer ETH by using transfer() may cause this transaction to fail
Lines of code Vulnerability details Impact Transfer ETH by using transfer may cause this transaction to fail. In EIP-1884: In many cases, a recipient of ether from a CALL will want to issue a LOG. The LOG operation costs 375 plus 375 per topic. If the LOG also wants to do an SLOAD, this change ma...
CVE-2021-1884
CVE-2021-1884 is a race condition reported in the Heimdal component. Public docs tie it to macOS security updates: Mojave Security Update 2021-004 and Catalina Security Update 2021-003, with potential for a remote attacker to cause a denial of service. The related Apple advisories confirm the aff...
Advisory ROSA-SA-2021-1884
Software: libpng 1.5.13 OS: Cobalt 7.9 CVE-ID: CVE-2013-7353 CVE-Crit: HIGH CVE-DESC: Integer overflow in pngsetunknownchunks function in libpng / pngset.c in libpng before 1.5.14beta08 allows context-sensitive attackers to cause a denial of service segmentation error and crash via a crafted imag...
SUSE: Security Advisory (SUSE-SU-2021:1884-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-1884-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for libssh2 CESA-2019:1884 centos7
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libssh2 security update
CentOS Errata and Security Advisory CESA-2019:1884 An update for libssh2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2019-1884
creationtimestamp| type| source ---|---|--- 2019-07-04 22:59:54+00:00| seen| https://t.me/cveNotify/202...
CVE-2019-1884
The CVE-2019-1884 issue affects Cisco Web Security Appliance (WSA) AsyncOS Web Proxy functionality. A vulnerability in input validation for certain HTTP/HTTPS request fields could allow an authenticated, remote attacker to cause the device to stop processing traffic, producing a DoS condition. Th...
Security Bulletin: A Zip Slip vulnerability is exposed in Case Manager (CVE-2018-1884)
Summary IBM Case Manager has addressed the following vulnerability. A Zip Slip vulnerability is exposed in Case Manager with the ability to import solution package zip files. CVE-2018-1884 Vulnerability Details CVEID: CVE-2018-1884 DESCRIPTION: IBM Case Manager is vulnerabile to a "zip slip"...
CVE-2018-1884
The CVE-2018-1884 issue affects IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0. It is a Zip Slip path traversal vulnerability that could allow an attacker to execute code by manipulating imported solution package zip files. IBM’s security bulletin confirms the root caus...
CVE-2018-1884
IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to execute code using directory traversal techniques. IBM X-Force ID: 151970...
Security Bulletin: File path traversal vulnerability in IBM Business Process Manager (BPM) and WebSphere Lombardi Edition (WLE) (CVE-2015-1884)
Summary IBM Business Proccess Manager and WebSphere Lombardi Edition are vulnerable to file path traversal. Due to insufficient input parameter validation files can be downloaded by authenticated attackers using specially crafted URLs. Vulnerability Details CVEID: CVE-2015-1884 DESCRIPTION: IBM...
CVE-2017-1884
CVE-2017-1884 entry is rejected/not used per the description; does not represent an active vulnerability entry.
CVE-2012-1884
CVE-2012-1884 entry is rejected/not used and does not represent an active vulnerability entry.
Gentoo Security Advisory GLSA 201309-11
Gentoo Linux Local Security Checks GLSA 201309-11 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...