11664 matches found
Oracle MySQL Server 5.7 <= 5.7.23 Security Update (cpujul2019) - Windows
Oracle MySQL Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
EulerOS 2.0 SP2 : bind (EulerOS-SA-2019-1730)
According to the version of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in the way bind implemented tunable which limited simultaneous TCP client connections. A remote attacker could use this flaw to...
EulerOS 2.0 SP2 : vim (EulerOS-SA-2019-1753)
According to the version of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text fi...
EulerOS 2.0 SP2 : sqlite (EulerOS-SA-2019-1720)
According to the version of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a...
EulerOS 2.0 SP2 : net-snmp (EulerOS-SA-2019-1716)
According to the version of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to...
EulerOS 2.0 SP2 : gd (EulerOS-SA-2019-1715)
According to the version of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The GD Graphics Library aka LibGD 2.2.5 has a double free in the gdImagePtr functions in gdgifout.c, gdjpeg.c, and gdwbmp.c. NOTE: PHP is...
EulerOS 2.0 SP2 : ntp (EulerOS-SA-2019-1719)
According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number o...
EulerOS 2.0 SP2 : dump (EulerOS-SA-2019-1740)
According to the version of the dump package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could creat...
EulerOS 2.0 SP2 : graphviz (EulerOS-SA-2019-1726)
According to the version of the graphviz packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The agroot function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by...
EulerOS 2.0 SP2 : samba (EulerOS-SA-2019-1744)
According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this fl...
EulerOS 2.0 SP2 : java-1.7.0-openjdk (EulerOS-SA-2019-1745)
According to the versions of the java-1.7.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenJDK: Improper field access checks CVE-2018-3169 - OpenJDK: Font layout engine out of bounds access setCurrGlyphID CVE-2019-2698 ...
EulerOS 2.0 SP2 : freeradius (EulerOS-SA-2019-1747)
According to the version of the freeradius package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered freeradius does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to...
Code injection
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner, while adding a device to the account using a QR-code. The QR-code follows an easily predictable pattern that depends only on the specific device ID of the robot vacuum cleaner. By generating a QR-code...
CVE-2019-12821
The CVE concerns the Shenzhen Jisiwei i3 robot vacuum cleaner’s app 2.0. A QR code used to add a device to an account encodes the device ID using a predictable pattern (JSW + six digits). An attacker can generate a QR-code with a target device ID to connect an arbitrary device and gain full acces...
CVE-2019-12820
The CVE-2019-12820 entry concerns the Shenzhen Jisiwei i3 robot vacuum cleaner app 2.0 (Android/iOS). The vulnerability is that login and other personal information communications between the app and its server are sent over unencrypted HTTP, enabling a local-network MiTM attacker to capture cred...
SQL Injection Vulnerability in Website Building System v2.0 of Henan Lishuo Internet Information Technology Co.
Henan Lishuo Internet Information Technology Co., Ltd. is a well-known comprehensive Internet service organization, providing network solutions for enterprises. Henan LISO Internet Information Technology Co., Ltd. website builder system v2.0 SQL injection vulnerability, attackers can use the...
Buffer overflow
eQ-3 HomeMatic CCU2 devices before 2.41.9 and CCU3 devices before 3.43.16 have buffer overflows in the ReGa ise GmbH HTTP-Server 2.0 component, aka HMCCU-179. This may lead to remote code execution...
CVE-2019-10122
CVE-2019-10122 affects eQ-3 HomeMatic CCU2 (firmware < 2.41.9) and CCU3 (firmware
Debian: Security Advisory (DLA-1848-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
