33558 matches found
Ubuntu 14.04 LTS : Firebird vulnerabilities (USN-3929-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3929-1 advisory. It was discovered that Firebird incorrectly handled certain malformed packets. A remote attacker could possibly use this issue with a specially crafted...
USN-3929-1: Firebird vulnerabilities
It was discovered that Firebird incorrectly handled certain malformed packets. A remote attacker could possibly use this issue with a specially crafted network packet to cause Firebird to crash, resulting in a denial of service. CVE-2014-9323 It was discovered that Firebird incorrectly handled...
USN-3929-1 firebird2.5 vulnerabilities
It was discovered that Firebird incorrectly handled certain malformed packets. A remote attacker could possibly use this issue with a specially crafted network packet to cause Firebird to crash, resulting in a denial of service. CVE-2014-9323 It was discovered that Firebird incorrectly handled...
CVE-2014-7198
creationtimestamp| type| source ---|---|--- 2019-04-01 07:36:06+00:00| seen| https://t.me/cibsecurity/3449...
CVE-2014-7198
CVE-2014-7198 affects OMERO prior to 5.0.6, where the web interface framework lacks CSRF protection, enabling multiple CSRF vulnerabilities. The root cause is missing CSRF protection in the OMERO web UI, exposing actions initiated by forged requests to potentially impact confidentiality, integrit...
Security Bulletin: IBM Security Directory Suite is affected by multiple vulnerabilities (CVE-2016-10142, CVE-2015-3331, CVE-2014-2523)
Summary IBM Security Directory Suite ISDS has addressed the following vulnerabilities due to buffer overflow, remote arbitrary code execution, and denial of service. Vulnerability Details CVEID: CVE-2016-10142 DESCRIPTION: The IETF IPv6 protocol is vulnerable to a denial of service. By leveraging...
Security Bulletin: Potential bypass security vulnerability in Expression Language library used by WebSphere Application Server shipped with Jazz for Service Management (CVE-2014-7810)
Summary Security Bulletin: Potential bypass security vulnerability in Expression Language library used by WebSphere Application Server shipped with Jazz for Service Management CVE-2014-7810 Vulnerability Details CVEID: CVE-2014-7810 DESCRIPTION: Apache Tomcat could allow a remote attacker to bypa...
CVE-2014-5431
creationtimestamp| type| source ---|---|--- 2019-03-26 19:32:11+00:00| seen| https://t.me/cibsecurity/3362...
CVE-2014-5401
creationtimestamp| type| source ---|---|--- 2019-03-26 19:32:11+00:00| seen| https://t.me/cibsecurity/3363...
CVE-2014-5432
creationtimestamp| type| source ---|---|--- 2019-03-26 19:32:09+00:00| seen| https://t.me/cibsecurity/3361...
CVE-2014-5433
creationtimestamp| type| source ---|---|--- 2019-03-26 19:32:08+00:00| seen| https://t.me/cibsecurity/3360...
CVE-2014-5434
creationtimestamp| type| source ---|---|--- 2019-03-26 17:27:08+00:00| seen| https://t.me/cibsecurity/3357...
CVE-2014-5432
Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 is remotely accessible via Port 22/SSH without authentication. A remote attacker may be able to make unauthorized configuration changes to the WBM, as well as issue commands to access...
CVE-2014-5401
The CVE-2014-5401 issue affects Hospira MedNet software versions 5.8 and earlier, which bundle vulnerable JBoss Enterprise Application Platform components. The root cause is improper handling of the affected JBoss code, enabling unauthenticated remote code execution on MedNet servers. Hospira has...
CVE-2014-5431
CVE-2014-5431 affects Baxter SIGMA Spectrum Infusion System 6.05 with Wireless Battery Module 16. The issue is a hard-coded password that grants access to WBM management functions, enabling unauthorized configuration changes (e.g., wireless status and phase-complete audible alarm). The vulnerabil...
CVE-2014-5432
CVE-2014-5432 affects Baxter SIGMA Spectrum Infusion System v6.05 (model 35700BAX) with Wireless Battery Module (WBM) v16. The root cause includes unauthenticated remote SSH access (Port 22) and related credential exposure. Consequences: remote attacker could modify WBM configuration and retrieve...
CVE-2014-5433
CVE-2014-5433 affects Baxter’s SIGMA Spectrum Infusion System (Version 6.05, model 35700BAX) with the Wireless Battery Module (WBM) Version 16. The connected disclosures describe multiple issues: a hard-coded password enabling unauthorized management access (CWE-259), an authentication bypass tie...
CVE-2014-5433
An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16, which may allow an attacker to gain access the hos...
CVE-2014-5434
The CVE-2014-5434 entry concerns Baxter’s SIGMA Spectrum Infusion System: version 6.05 (model 35700BAX) with Wireless Battery Module (WBM) version 16, which contains a default, hard-coded credential used with FTP. The vulnerability allows remote access in some vectors (three vulnerabilities remot...