11633 matches found
EulerOS 2.0 SP5 : golang (EulerOS-SA-2020-2247)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid...
EulerOS 2.0 SP5 : cvs (EulerOS-SA-2020-2280)
According to the version of the cvs package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a...
EulerOS 2.0 SP5 : libplist (EulerOS-SA-2020-2288)
According to the versions of the libplist package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service out-of-bounds heap read and crash via a crafte...
EulerOS 2.0 SP5 : mutt (EulerOS-SA-2020-2258)
According to the versions of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.CVE-2020-14093 - Mutt before 1.14.4 and NeoMutt befo...
EulerOS 2.0 SP5 : python-sqlalchemy (EulerOS-SA-2020-2297)
According to the version of the python-sqlalchemy package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled.CVE-2019-7548 Note that Tenable Network Security has...
EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2020-2254)
According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader...
EulerOS 2.0 SP5 : python-rsa (EulerOS-SA-2020-2267)
According to the version of the python-rsa package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., ...
EulerOS 2.0 SP5 : libidn (EulerOS-SA-2020-2252)
According to the version of the libidn package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in the decodedigit function in punydecode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibl...
EulerOS 2.0 SP5 : gnome-keyring (EulerOS-SA-2020-2283)
According to the version of the gnome-keyring packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM...
EulerOS 2.0 SP5 : python (EulerOS-SA-2020-2264)
According to the version of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open,...
EulerOS 2.0 SP5 : binutils (EulerOS-SA-2020-2239)
According to the version of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - rememberKtype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption aka...
Fedora: Security Advisory for tcpreplay (FEDORA-2020-0e036c907e)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for tcpreplay (FEDORA-2020-c50d8b980b)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Huawei GaussDB Kernel Detection (Linux/Unix SSH Login)
SSH login-based detection of Huawei GaussDB Kernel. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for kpmcore (FEDORA-2020-da859aadde)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-26649
AtomXCMS 2.0 is affected by Incorrect Access Control via admin/dump.php...
CVE-2020-26650
AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php...
Improper access control
AtomXCMS 2.0 is affected by Incorrect Access Control via admin/dump.php...
