Security Bulletin: This Power System update is being released to address CVE 2018-1992

Summary POWER9: In response to a buffer overflow vulnerability on the boot loader, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2018-1992. Vulnerability Details CVEID: CVE-2018-1992 DESCRIPTION: The IBM POWER9 boot firmware'...

SUSE: Security Advisory (SUSE-SU-2013:1103-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:1103-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:0881-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

1992.co.kr Cross Site Scripting vulnerability OBB-1453683

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-1992

A format string vulnerability in the Varrcvr daemon of PAN-OS on PA-7000 Series devices with a Log Forwarding Card LFC allows remote attackers to crash the daemon creating a denial of service condition or potentially execute code with root privileges. This issue affects Palo Alto Networks PAN-OS...

CVE-2020-1992

The CVE-2020-1992 entry describes a format-string vulnerability in the Varrcvr daemon of PAN-OS on PA-7000 Series devices with an LFC. Affected are PAN-OS 9.0 before 9.0.7 and 9.1 before 9.1.2 when WildFire is configured; PA-7000 with LFC installed and configured is required. The issue allows rem...

Stack overflow

bit2spr 1992-06-07 has a stack-based buffer overflow 129-byte write in convbitmap in bit2spr.c via a long line in a bitmap file...

CVE-2018-1992

The IBM POWER9 boot firmware bootloader contains a buffer overflow in the initial boot image load path that could overwrite its own instruction memory and bypass secure boot protections, allowing trojan installation. Affected products/versions include FW910 boot firmware and OP910/OP920 OpenPOWER...

CVE-2019-1992

In btahlsdpqueryresults of btahlmain.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

CVE-2019-1992

CVE-2019-1992 affects Android. In the code path bta_hl_sdp_query_results within bta_hl_main.cc a race condition can cause a use-after-free, leading to remote code execution with no extra privileges needed. The issue is tied to Android versions 7.0–7.1.2, 8.0, 8.1, and 9 (Android ID: A-116222069)....

Security Bulletin: An unspecified vulnerability in event processing could allow elevated privileges in IBM Systems Director (CVE-2015-1992)

Summary An unspecified vulnerability in event processing may cause unwanted behavior. Vulnerability Details Summary An unspecified vulnerability in event processing may cause unwanted behavior. Vulnerability Details: CVE-ID: CVE-2015-1992 Description: An unspecified vulnerability in event...

CVE-2017-1992

CVE-2017-1992 is rejected/not used per description; this entry does not represent an active vulnerability.

CVE-2017-1992

...

HP ArcSight ESM < 6.8c Information Disclosure

According to its self-reported version number, the version of HP ArcSight Enterprise Security Manager ESM installed on the remote host is prior to 6.8.0.1896 6.8c. It is, therefore, affected by an unspecified flaw that allows an authenticated, remote attacker to disclose sensitive information. C...

CVE-2016-1992

HP ArcSight ESM prior to 6.8c and ArcSight ESM Express prior to 6.9.1 contain an information-disclosure vulnerability that allows remote authenticated users to obtain sensitive data via unspecified vectors. The available sources confirm the affected products and versions and describe an authentic...

CVE-2015-1992

CVE-2015-1992 affects IBM Systems Director event processing across multiple versions (5.2.x, 6.1.x, 6.2.x, 6.3.x up to 6.3.6.0). The root cause is an unspecified issue in event processing that can let local attackers execute commands with elevated privileges. IBM security notes confirm affected F...

CVE-2014-1992

CVE-2014-1992 describes a cross-site scripting (XSS) vulnerability in the Messages function of Cybozu Garoon. Affected are Cybozu Garoon versions 3.1.x, 3.5.x, and 3.7.x prior to 3.7 SP4, potentially allowing remote authenticated users to inject arbitrary scripts/HTML via unspecified vectors. Cur...

openSUSE Security Update : libdmx (openSUSE-SU-2013:1029-1)

This update of libdmx fixes several integer overflow issues. - U0001-integer-overflow-in-DMXGetScreenAttributes-CVE-20 13-.patch, U0002-integer-overflow-in-DMXGetWindowAttributes-CVE-20 13-.patch, U0003-integer-overflow-in-DMXGetInputAttributes-CVE-201 3-1.patch, - integer overflow in...

Ubuntu: Security Advisory (USN-1992-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...