Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-1532)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1933

creationtimestamp| type| source ---|---|--- 2020-01-28 08:37:56+00:00| seen| https://t.me/cveNotify/505...

CVE-2020-1933

A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0. Malicious scripts could be injected to the UI through action by an unaware authenticated user in Firefox. Did not appear to occur in other browsers...

CVE-2020-1933

CVE-2020-1933 describes a cross-site scripting (XSS) vulnerability in Apache NiFi, affecting versions 1.0.0 through 1.10.0. According to the provided documents, the issue allows an authenticated user to inject malicious scripts into the UI via actions performed in Firefox; other browsers do not a...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2019-2701)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for cronie (EulerOS-SA-2019-1933)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2019-2437)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : python-pillow (EulerOS-SA-2019-2437)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size...

CVE-2011-1933

creationtimestamp| type| source ---|---|--- 2019-11-27 00:31:16+00:00| seen| https://t.me/cibsecurity/8351...

CVE-2011-1933

SQL injection vulnerability in Jifty::DBI before 0.68...

CVE-2011-1933

SQL injection vulnerability in Jifty::DBI before 0.68...

CVE-2011-1933

SQL injection vulnerability in Jifty::DBI before 0.68...

CVE-2011-1933

The CVE-2011-1933 issue affects Jifty::DBI prior to version 0.68, per multiple sources in connected documents, describing a SQL injection vulnerability in Jifty::DBI. The root cause is unsafe construction/handling of SQL queries within Jifty::DBI, enabling an attacker to manipulate SQL commands. ...

Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics (CVE-2018-3180, CVE-2013-1624, CVE-2018-1933, CVE-2015-1832, CVE-2018-15494)

Summary This Security Bulletin addresses multiple vulnerabilities that have been remediated in IBM Planning Analytics 2.0.7. There is a vulnerability in IBM® Runtime Environment Java™ used by IBM Planning Analytics 2.0.6 and lower. IBM Planning Analytics 2.0.7 has addressed the applicable CVE by...

CVE-2019-1933

creationtimestamp| type| source ---|---|--- 2019-07-06 05:00:04+00:00| seen| https://t.me/cveNotify/282...

CVE-2019-1933

Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) contains an input-validation vulnerability in its email message scanning that can let an unauthenticated, remote attacker bypass configured message filters by sending a crafted email to an ESA-protected recipient. The issue stems fro...

CVE-2018-1933

IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153177...

CVE-2018-1933

CVE-2018-1933 affects IBM Planning Analytics 2.0 through 2.0.6, with a cross-site scripting vulnerability in the Web UI that could allow an attacker to inject JavaScript and potentially disclose credentials within a trusted session. The IBM Security Bulletin notes remediation in IBM Planning Anal...

CVE-2017-1933

...

Security update for the MozillaFirefox, mozilla-nss and mozilla-nspr (important)

This update to MozillaFirefox fixes several security issues and bugs. Mozilla Firefox was updated to 44.0. Mozilla NSS was updated to 3.21 Mozilla NSPR was updated to 4.11. The following vulnerabilities were fixed: CVE-2016-1930/CVE-2016-1931: Miscellaneous memory safety hazards boo963633...