33553 matches found
Security Bulletin: IBM® DB2® for LUW is affected by the OpenSSL vulnerability CVE-2014-3470
Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Vulnerability Details CVE-ID: CVE-2014-3470 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by the implementation of anonymous ECDH ciphersuites. A remote...
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2020-5936)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5936 advisory. - USB: serial: omninet: fix reference leaks at open Johan Hovold Orabug: 30484765 CVE-2017-8925 - x8632, entry: Store badsys error code in %eax Sve...
Unbreakable Enterprise kernel security update
2.6.39-400.327.1 - USB: serial: omninet: fix reference leaks at open Johan Hovold Orabug: 30484765 CVE-2017-8925 - x8632, entry: Store badsys error code in %eax Sven Wegener Orabug: 30783266 CVE-2014-4508 CVE-2014-4508 - x8632, entry: Do syscall exit work on badsys CVE-2014-4508 Andy Lutomirski...
CVE-2020-27524
On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version N+RCNAUP0395 mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services...
Format string
On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version N+RCNAUP0395 mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services...
CVE-2014-8580 - Authentication Flaw in Citrix NetScaler Application Delivery Controller and NetScaler Gateway Could Result in Unauthorised Access to Network Resources
Description of Problem An authentication flaw has been identified in certain configurations of Citrix NetScaler ADC and NetScaler Gateway that could allow an authenticated user to obtain unauthorised access to network resources for another authenticated user. This flaw affects the following...
openSUSE Security Update : apache-commons-httpclient (openSUSE-2020-1875)
This update for apache-commons-httpclient fixes the following issues : - http/conn/ssl/SSLConnectionSocketFactory.java ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service HTTPS call hang via unspecified vectors...
Security update for apache-commons-httpclient (important)
openSUSE Security Update: Security update for apache-commons-httpclient Announcement ID: openSUSE-SU-2020:1873-1 Rating: important References: 1178171 945190 Cross-References: CVE-2014-3577 CVE-2015-5262 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now...
CVE-2014-7856
CVE-2014-7856 is rejected/not used; this candidate was withdrawn by its CNA.
CVE-2014-7855
This CVE ID is rejected/not used and does not represent an active vulnerability entry.
CVE-2014-7820
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2014-7235
creationtimestamp| type| source ---|---|--- 2020-11-05 16:55:13+00:00| seen| MISP/9fbd6001-b34c-4886-8240-d3e93a433faf 2020-11-05 19:44:38+00:00| seen| MISP/77f74cbc-dd0e-4c6e-a9c4-f15e1a87c0f9 2020-11-05 19:44:38+00:00| seen| MISP/d60bbf52-1b06-4ddd-b894-c1da7f68f083 2020-11-05 19:44:39+00:00|...
nginx Information Disclosure Vulnerability (CVE-2014-3556)
nginx is prone to an information disclosure vulnerability in the SMTP proxy. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2020-2392)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP2 : perl-DBI (EulerOS-SA-2020-2382)
According to the versions of the perl-DBI package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A buffer overflow was found in perl-DBI 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause...
Security Bulletin: Security vulnerability exists in the open source library Apache Commons FileUpload that is shipped with and used by IBM Emptoris S
Question Security Bulletin: Security vulnerability exists in the open source library Apache Commons FileUpload that is shipped with and used by IBM Emptoris Strategic Supply Management. Answer SUMMARY: IBM Emptoris Strategic Supply Management is vulnerable to denial of service due to a flaw in th...
IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.15 / 9.x < 9.0.0.10 Security Bypass (CVE-2014-7810)
The IBM WebSphere Application Server running on the remote host is version 7.0.0.x through 7.0.0.45, 8.0.0.x through 8.0.0.15, 8.5.0.x prior to 8.5.5.15, or 9.x prior to 9.0.0.10. It is, therefore, affected by a vulnerability due to the use of expression language which allows an unauthenticated,...