20923 matches found
SUSE: Security Advisory (SUSE-SU-2012:0055-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1287-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-0948
CVE-2009-0948 involves multiple buffer overflows in the functions cdf_read_sat, cdf_read_long_sector_chain, and cdf_read_ssat in a file prior to version 5.02. Public records (SUSE, Ubuntu, Debian OSV, NVD, etc.) consistently describe these overflows, with NVD citing CVSS v3.1 CRITICAL (network ac...
CVE-2009-0947
CVE-2009-0947 is detailed with concrete technical flaws: multiple integer overflows in the cdf_read_property_info and cdf_read_sat functions in a file prior to version 5.02. The candiate exploit path is via these overflows, potentially enabling memory corruption (buffer/heap overflow) as describe...
CVE-2009-3721
CVE-2009-3721 affects yTNEF and Evolution’s TNEF parser derived from yTNEF. The vulnerabilities are described as directory traversal and buffer overflow flaws that could allow a crafted email to cause writes to arbitrary filesystem locations, application crashes, or potentially arbitrary code exe...
USN-4954-1: GNU C Library vulnerabilities
Jason Royes and Samuel Dytrych discovered that the memcpy implementation for 32 bit ARM processors in the GNU C Library contained an integer underflow vulnerability. An attacker could possibly use this to cause a denial of service application crash or execute arbitrary code. CVE-2020-6096 It was...
USN-4954-1 glibc vulnerabilities
Jason Royes and Samuel Dytrych discovered that the memcpy implementation for 32 bit ARM processors in the GNU C Library contained an integer underflow vulnerability. An attacker could possibly use this to cause a denial of service application crash or execute arbitrary code. CVE-2020-6096 It was...
SUSE: Security Advisory (SUSE-SU-2019:1958-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2019:1958-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-3767 affecting package openldap 2.4.50-1
CVE-2009-3767 affecting package openldap 2.4.50-1. An upgraded version of the package is available that resolves this issue...
MantisBT < 2.24.5 Session Hijacking Vulnerability - Linux
MantisBT is prone to a session hijacking vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...
CVE-2009-20001
creationtimestamp| type| source ---|---|--- 2021-03-07 22:49:46+00:00| seen| https://t.me/cibsecurity/24562...
CVE-2009-20001
CVE-2009-20001 affects MantisBT prior to 2.24.5. The issue is that a unique cookie string assigned per user is not reset on logout, so a stolen/compromised cookie may keep the session valid and allow an attacker to log in as the victim. The description and connected records consistently state thi...
Fedora: Security Advisory for community-mysql (FEDORA-2021-b1d1655cef)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-2009
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Roles. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...
VulnCheck KEV: CVE-2020-8270
An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 hotfix CTX285341 and CTX285342...
VulnCheck KEV: CVE-2020-8283
An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9...
Oracle MySQL Server 8.0 <= 8.0.19 Security Update (cpujan2021) - Windows
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
Oracle MySQL Server 8.0 <= 8.0.19 Security Update (cpujan2021) - Linux
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
