138 matches found
CVE-2014-1936
rc before 1.7.1-5 insecurely creates temporary files...
CVE-2014-1936
CVE-2014-1936 concerns the temporary file handling in the rc project’s Temp File Handler. Multiple connected sources confirm that rc versions before 1.7.1-5 insecurely create temporary files, enabling potential unauthorized access to protected information (root cause: insecure temporary file crea...
CVE-2014-1936
rc before 1.7.1-5 insecurely creates temporary files...
Cisco IMC Supervisor and Cisco UCS Director Command Injection (CVE-2019-1936)
A command injection vulnerability exists in Cisco IMC Supervisor and Cisco UCS Director. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands in the affected system...
CVE-2019-1936
creationtimestamp| type| source ---|---|--- 2019-09-02 15:56:25+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ciscoucsrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:14+00:00| seen|...
Cisco UCS Director Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco UCS Director Unauthenticated Remote Code Execution', 'Description' = %q The Cisco UCS Director virtual appliance contains two flaws that ca...
CVE-2019-1936
CVE-2019-1936 is a command-injection vulnerability in the web-based management interface of Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data. It stems from insufficient input validation and, per Cisco’s advisory, can be exploited by an authenticated administra...
Cisco UCS Director Unauthenticated Remote Code Execution
The Cisco UCS Director virtual appliance contains two flaws that can be combined and abused by an attacker to achieve remote code execution as root. The first one, CVE-2019-1937, is an authentication bypass, that allows the attacker to authenticate as an administrator. The second one,...
Security vulnerabilities have been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2018-1936,CVE-2019-4014)
Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-1936 DESCRIPTION: IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable ...
Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise (CVE-2018-1936, CVE-2019-4014)
Summary IBM DB2 is shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise formerly IBM IoT Predictive Maintenance and Optimization. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. CVE-2018-1936, CVE-2019-4014 Vulnerability...
Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with Predictive Maintenance and Quality (CVE-2018-1936, CVE-2019-4014)
Summary IBM DB2 is shipped with Predictive Maintenance and Quality. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. CVE-2018-1936, CVE-2019-4014 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
CVE-2018-1936
CVE-2018-1936 is a stack-based buffer overflow in IBM DB2’s libdb2e.so.1 affecting DB2 9.7, 10.1, 10.5, and 11.1. The root cause is improper bounds checking, allowing a local attacker to execute arbitrary code. Connected IBM security bulletins confirm the issue and provide remediation paths: upda...
SUSE SLES15 Security Update : php7 (SUSE-SU-2018:1936-2)
This update for php7 fixes the following issues : - CVE-2018-12882: exifreadfromimpl allowed attackers to trigger a use-after-free in exifreadfromfile because it closed a stream that it is not responsible for closing bsc1099098. Note that Tenable Network Security has extracted the preceding...
CVE-2013-1936
CVE-2013-1936 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-1936
CVE-2017-1936 is rejected/not active; this CVE entry is not used.
IBM WebSphere Application Server 7.0 < 7.0.0.39 Multiple Vulnerabilities (FREAK)
Binary data 9700.prm...
CVE-2015-1936
CVE-2015-1936 concerns IBM WebSphere Application Server Administrative Console session hijacking when Security is disabled. A remote authenticated attacker could exploit this to hijack another user’s session via the JSESSIONID parameter. Affected products/versions from the sources include WAS 8.0...
RHEL 5 : rhev-hypervisor (RHSA-2011:1090)
An updated rhev-hypervisor package that fixes one security issue and several bugs is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2011-1936
CVE-2011-1936 concerns the Xen hypervisor on x86 with VMX enabled. The issue is that cpuid instruction emulation is not properly handled when exiting a virtual machine, which can allow a local guest user to trigger a denial of service (guest crash) via unspecified vectors. The description does no...