33558 matches found
CVE-2014-0242
CVE-2014-0242 affects the mod_wsgi Apache module (pre-3.4 in embedded mode). It can cause memory contents to be leaked via the Content-Type header, enabling disclosure of sensitive information. The issue is coupled with CVE-2014-0240 (privilege escalation). Public advisories and Nessus/Gentoo ent...
(RHSA-2019:4117) Moderate: Open Liberty 19.0.0.12 Runtime security update
Open Liberty is a lightweight open framework for building fast and efficient cloud-native Java microservices. This release of Open Liberty 19.0.0.12 serves as a replacement for Open Liberty 19.0.0.11 and includes bug fixes, enhancements, and security fixes. For specific information about this...
CVE-2014-8179
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation...
CVE-2014-8179
CVE-2014-8179 affects Docker Engine prior to 1.8.3 and CS Docker Engine prior to 1.6.2-CS7. The vulnerability arises from improper validation and extraction of the manifest object from a JSON representation during a pull, enabling an attacker to inject new attributes into a JSON object and bypass...
CVE-2014-8178
CVE-2014-8178 affects Docker Engine prior to 1.8.3 and CS Docker Engine prior to 1.6.2-CS7. The root cause is failure to use globally unique identifiers to store image layers, enabling an attacker to poison the image cache via crafted images in pull or push operations. Mitigation: upgrade to the ...
EulerOS 2.0 SP2 : python-pillow (EulerOS-SA-2019-2437)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size...
EulerOS 2.0 SP2 : sendmail (EulerOS-SA-2019-2440)
According to the version of the sendmail packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The Sendmail program is a very widely used Mail Transport Agent MTA.MTAs send mail from one machine to another. Sendmail is not a client program,...
EulerOS 2.0 SP2 : libsndfile (EulerOS-SA-2019-2513)
According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libsndfile before 1.0.28, an error in the 'headerread' function common.c when handling ID3 tags can be exploited to cause a stack-based...
EulerOS 2.0 SP2 : libndp (EulerOS-SA-2019-2497)
According to the version of the libndp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer overflow in the ndpmsgoptdnssldomain function in libndp allows remote routers to cause a denial of service crash and possibly execute arbitra...
EulerOS 2.0 SP2 : less (EulerOS-SA-2019-2475)
According to the version of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers...
CVE-2014-3591
creationtimestamp| type| source ---|---|--- 2019-12-03 16:02:59+00:00| seen| https://t.me/cibsecurity/8450 2024-03-05 09:12:14+00:00| seen| https://t.me/ctinow/200021 2026-07-03 11:02:08+00:00| seen| https://gist.github.com/tu-trinh-scale/f145985a4b35b87128c866345bfe7acf 2026-07-03 11:02:08+00:00...
lcmspubcontact.lc.ca.gov Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1029517 Security Researcher Gh05tPT Helped patch 6889 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting lcmspubcontact.lc.ca.gov...
Debian DLA-2014-1 : vino security update
Several vulnerabilities have been identified in the VNC code of vino, a desktop sharing utility for the GNOME desktop environment. The vulnerabilities referenced below are issues that have originally been reported against Debian source package libvncserver. The vino source package in Debian ships...
CVE-2014-9356
CVE-2014-9356 is a path-traversal vulnerability in Docker prior to 1.3.3 that allows remote attackers to write to arbitrary host files by using a full pathname in an absolute symlink inside an image or during a Dockerfile build, effectively bypassing container protections. Public-branch advisorie...
AZL-41815 CVE-2014-3591 affecting package grub2 for versions less than 2.06-25
Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during...
CVE-2014-3591
Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during...
CVE-2014-3591
Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during...
CVE-2014-3591
CVE-2014-3591 affects Libgcrypt (before 1.6.3) and GnuPG (before 1.4.19), which do not implement ciphertext blinding for ElGamal decryption, enabling physically proximate attackers to potentially extract private keys via crafted ciphertext and EM field fluctuations during multiplication. Related ...
[SECURITY] [DLA 2014-1] vino security update
Package : vino Version : 3.14.0-2+deb8u1 CVE ID : CVE-2014-6053 CVE-2018-7225 CVE-2019-15681 Debian Bug : 945784 Several vulnerabilities have been identified in the VNC code of vino, a desktop sharing utility for the GNOME desktop environment. The vulnerabilities referenced below are issues that...