33558 matches found
EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2019-2616)
According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The psffwrite function in fileio.c in libsndfile allows attackers to cause a denial of service divide-by-zero error and application crash via...
EulerOS 2.0 SP3 : graphviz (EulerOS-SA-2019-2592)
According to the version of the graphviz packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via forma...
Security Bulletin: Multiple Security Vulnerabilities found in IBM Sterling Secure Proxy (CVE-2014-0411, CVE-2014-0050)
Summary IBM Sterling Secure Proxy is shipped with IBM Runtime Environment, Java™ Technology Edition the “IBM JRE”, that is based on an Oracle Java Runtime Environment JRE. Oracle has released the January 2014 critical patch updates CPU that contain security vulnerability fixes for the JRE. The IB...
Security Bulletin: A vulnerability exists in Apache Xalan-Java prior to 2.7.2 as used in IBM Sterling Control Center 5.2 (CVE-2014-0107)
Summary IBM Sterling Control Center 5.2 utilizes Apache Xalan-Java that contains a vulnerability. Vulnerability Details CVE-ID: CVE-2014-0107 DESCRIPTION: Apache Xalan-Java could allow a remote attacker to bypass security restrictions, caused by the improper handling of output properties. An...
Security Bulletin: Vulnerability in SSLv3 affects Sterling Control Center (CVE-2014-3566)
Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in Sterling Control Center Vulnerability Details CVE-ID: CVE-2014-3566 DESCRIPTION: Product could allow a remote attacker to obtain sensitive...
CVE-2014-8179
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation...
CVE-2014-8179
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation...
CVE-2014-8179
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation...
CVE-2014-8178
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands...
UBUNTU-CVE-2014-8178
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands...
CVE-2014-8650
python-requests-Kerberos through 0.5 does not handle mutual authentication...
DEBIAN-CVE-2014-8650
python-requests-Kerberos through 0.5 does not handle mutual authentication...
CVE-2014-3643
jersey: XXE via parameter entities not disabled by the jersey SAX parser...
CVE-2014-3701
eDeploy has tmp file race condition flaws...
CVE-2014-8561
imagemagick 6.8.9.6 has remote DOS via infinite loop...
CVE-2014-4913
ZF2014-03 has a potential cross site scripting vector in multiple view helpers...
CVE-2014-8650
python-requests-Kerberos through 0.5 does not handle mutual authentication...
CVE-2014-8650
Affected software: python-requests-Kerberos (Python) up to version 0.5. Root cause: mutual authentication is not handled by the library. Impact (as per provided metrics): CVSS v2 base 7.5 (HIGH) and CVSS v3.1 base 9.8 (CRITICAL) with network attack vector, no authentication, and partial/confident...
CVE-2014-8561
CVE-2014-8561 affects ImageMagick 6.8.9.6 with a remote denial-of-service via an infinite loop. The connected documents confirm the DoS impact, but do not provide explicit root-cause details, affected product variants beyond 6.8.9.6, or any remediation (patch/version) information. Documented expl...