20519 matches found
NewStart CGSL CORE 5.04 / MAIN 5.04 : logrotate Multiple Vulnerabilities (NS-SA-2021-0108)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has logrotate packages installed that are affected by multiple vulnerabilities: - Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a fi...
NewStart CGSL CORE 5.05 / MAIN 5.05 : rsyslog Vulnerability (NS-SA-2021-0176)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has rsyslog packages installed that are affected by a vulnerability: - Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might...
NewStart CGSL MAIN 6.02 : sudo Multiple Vulnerabilities (NS-SA-2021-0120)
The remote NewStart CGSL host, running version MAIN 6.02, has sudo packages installed that are affected by multiple vulnerabilities: - A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group aka %group in the sudoers file during...
CVE-2011-4119
creationtimestamp| type| source ---|---|--- 2021-10-26 16:15:05+00:00| seen| https://t.me/cibsecurity/31214...
CVE-2011-2195
creationtimestamp| type| source ---|---|--- 2021-10-26 16:14:57+00:00| seen| https://t.me/cibsecurity/31211...
CVE-2011-4119
CVE-2011-4119 affects caml-light
CVE-2011-2195
WebSVN 2.3.2 contains an unauthenticated OS command injection when allowDownload is enabled in config.php. An attacker can call the dl.php script with a well-formed path argument to execute arbitrary commands on the underlying OS. The issue is triggered without prior authentication and is tied to...
CVE-2011-1497
creationtimestamp| type| source ---|---|--- 2021-10-19 18:33:35+00:00| seen| https://t.me/cibsecurity/30799...
CVE-2011-1497
A cross-site scripting vulnerability flaw was found in the autolink function in Rails before version 3.0.6...
CVE-2011-1497
A cross-site scripting vulnerability flaw was found in the autolink function in Rails before version 3.0.6...
CVE-2011-1497
A cross-site scripting vulnerability flaw was found in the autolink function in Rails before version 3.0.6...
CVE-2011-1497
CVE-2011-1497 is a cross-site scripting (XSS) vulnerability in the auto_link function of Ruby on Rails, affecting Rails versions before 3.0.6. The flaw is described as an XSS vulnerability in the auto_link routine, implying that user-controlled input could be coerced into HTML output without prop...
Unspecified Vulnerability in Tecknodreams SapphireIMS
Tecknodreams SapphireIMS is an ITIL 2011 certified enterprise class service management system from Tecknodreams India. A security vulnerability exists in Tecknodreams SapphireIMS 40971, which can be exploited by an attacker for username enumeration...
Security Bulletin: Vulnerabilities in WebSphere Application Server affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise
Summary WebSphere Application Server is shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. Vulnerabilities have been identified in WebSphere Application Server and the information about their fixes are published in security bulletins. Vulnerability Details Refer to the...
Apache Struts Security Update (CVE-2011-5057)
Apache Struts is prone to a session tampering vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
Apache Struts Security Update (S2-009)
The remote host is missing a security update for Apache Struts announced via the referenced advisory. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2011-0640 affecting package kernel 5.10.111.1-1
CVE-2011-0640 affecting package kernel 5.10.111.1-1. A patched version of the package is available...
Security Bulletin: Security vulnerabilities have been fixed in IBM Security Identity Manager Virtual Appliance
Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerabilities in Apache HttpComponents and HttpCommons that affect WebSphere Application Server Vulnerability Details CVEID: CVE-2015-5262 DESCRIPTION: Apache Commons is vulnerable to a denial of service...
OpenSSL: ECDSA Private Key Leak (CVE-2011-1945) - Linux
OpenSSL leaks ECDSA private key through a remote timing attack. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...