CVE-2019-1935

creationtimestamp| type| source ---|---|--- 2019-09-02 15:56:25+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/ciscoucsscpuser.rb 2019-09-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47346 2024-11-14 06:09:55+00:00| seen|...

Cisco UCS Director default scpuser password

This module abuses a known default password on Cisco UCS Director. The 'scpuser' has the password of 'scpuser', and allows an attacker to login to the virtual appliance via SSH. This module has been tested with Cisco UCS Director virtual machines 6.6.0 and 6.7.0. Note that Cisco also mentions in...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1935-1) (SACK Slowness)

This update for the Linux Kernel 3.12.74-6064115 fixes one issue. The following security issue was fixed : This update contains a regression fix for CVE-2019-11478 bsc1140747. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

Buffer Overflow

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

CVE-2018-1935

IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM X-Force ID: 153315...

CVE-2018-1935

IBM Connections versions 5.0, 5.5, and 6.0 are affected by an information disclosure vulnerability where an authenticated user can obtain sensitive information from invalid request error messages. Root cause details are not provided beyond the error-message behavior in the cited sources. Impact i...

Security Bulletin: IBM® DB2® LUW contains a denial of service vulnerability in scalar functions that may result in arbitrary code execution as the DB2 instance owner (CVE-2015-1935)

Summary IBM® DB2 LUW contains a denial of service vulnerability in scalar functions. A remote, authenticated user can exploit this vulnerability to run arbitrary code with the authority of the DB2 instance owner, or cause a denial of service. Vulnerability Details CVEID: CVE-2015-1935 DESCRIPTION...

CVE-2017-1935

CVE-2017-1935 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2011-1935

pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets...

CVE-2011-1935

Details from multiple sources confirm CVE-2011-1935 affects libpcap's pcap-linux.c codepath for libpcap 1.1.1 prior to commit ea9432fabdf4b33cbc76d9437200e028f1c47c93. When snaplen is set, the frame size calculation may truncate packets, potentially allowing a remote attacker who can send crafted...

nrk.no Open Redirect vulnerability

Vulnerable URL: https://www.nrk.no/embed/PS271139vvbor" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1935 VIP website status:| Yes Check nrk.no SSL connection:| Grade: ...

sportsdirect.com Open Redirect vulnerability

Vulnerable URL: http://www.sportsdirect.com/redir.axd?ciid=207=advertising=2=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1935 Google Pagerank| 0 VIP website status:| Y...

[SECURITY] [DSA 3491-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3491-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 24, 2016 https://www.debian.org/security/faq -...

Oracle: Security Advisory (ELSA-2016-0258)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for thunderbird RHSA-2016:0258-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 5 / 6 / 7 : thunderbird (CESA-2016:0258)

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CentOS Update for thunderbird CESA-2016:0258 centos7

Check the version of thunderbird SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882400";...

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x, SL7.x i386/x86_64 (20160218)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. CVE-2016-1930, CVE-2016-1935 After installing the update,...

RHEL 6 / 7 : thunderbird (RHSA-2016:0258)

The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2016:0258 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed web content. A we...

CentOS Update for thunderbird CESA-2016:0258 centos6

Check the version of thunderbird SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882402";...