Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : Dompdf vulnerabilities (USN-6277-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6277-1 advisory. It was discovered that Dompdf was not properly validating untrusted input when processing HTML content under certain circumstance...

Cisco Nexus 9000 Series Switches Access List Bypass (CVE-2014-3330)

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489. This plugin only...

Cisco Nexus 7000 Denial of Service (CVE-2014-0684)

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Cisco NX-OS Software SNMP Information Disclosure (CVE-2014-3341)

The SNMP module in Cisco NX-OS 7.03N11 and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616. This plugin only work...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is shipped with, or a required product for, IBM Tivoli Netcool Configuration Manager (CVE-2014-7810)

Summary IBM WebSphere Application Server is shipped with IBM Tivoli Netcool Configuration Manager version 6.4.1; IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration Manager version 6.4.2. Information about a security vulnerability affecting IBM WebSphere...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is shipped with, or a required product for, IBM Tivoli Network Manager IP Edition (CVE-2014-7810)

Summary IBM WebSphere Application Server is shipped with IBM Tivoli Network Manager IP Edition versions 3.9 and 4.1.1; IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager IP Edition version 4.2. Information about a security vulnerability affecting IBM WebSphere...

SUSE CVE-2014-125106

Nanopb before 0.3.1 allows sizet overflows in pbdecbytes and pbdecstring...

CVE-2014-125106

Nanopb prior to 0.3.1 contains a size_t overflow in the decoding routines pb_dec_bytes and pb_dec_string. Affected software is Nanopb; the issue arises in versions before 0.3.1. The vulnerability is described across multiple sources as a size_t overflow, with high-severity CVSS metrics indicating...

CVE-2014-4123

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:31:43+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971603 2025-02-23 02:10:06+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2014-0496

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 01:16:12+00:00| seen| https://t.me/arpsyndicate/1353 2024-12-24 20:27:09+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971293 2025-02-14 10:00:30+00:00|...

CVE-2014-4077

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 13:41:38+00:00| exploited| https://t.me/arpsyndicate/1219 2024-12-24 20:31:41+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971600 2025-02-14 10:00:29+00:0...

CVE-2014-0546

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-11 19:19:03+00:00| seen| https://t.me/arpsyndicate/99 2023-12-05 03:49:08+00:00| seen| https://t.me/arpsyndicate/1382 2024-12-24 20:31:43+00:00| seen|...

CVE-2014-0780

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 02:24:23+00:00| seen| https://t.me/arpsyndicate/1367 2024-12-24 20:30:36+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971522 2025-02-12 21:08:00+00:00|...

CVE-2014-2817

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 07:54:18+00:00| seen| https://t.me/arpsyndicate/1151 2024-12-24 20:31:42+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971601 2025-02-14 10:00:29+00:00|...

Security Bulletin: Multiple Vulnerabilities of Apache HttpClient have affected APM Linux KVM Agent

Summary APM Linux KVM Agent is vulnerable to Apache HttpClient vulnerabilities described in220912, CVE-2020-13956. The fix includes httpclient-4.5.jar upgraded to httpclient-4.5.13.jar Vulnerability Details CVEID:CVE-2012-6153 DESCRIPTION: Apache HttpComponents could allow a remote attacker to...

Security Bulletin: TADDM is vulnerable to a denial of service due to vulnerability in Castor Library

Summary Castor Library used by IBM Tivoli Application Dependency Discovery Manager and is vulnerable to CVE-2014-3004 Vulnerability Details CVEID:CVE-2014-3004 DESCRIPTION: Castor Library could allow a remote attacker to obtain sensitive information, caused by an XML External Entity Injection XXE...

CVE-2014-125105

CVE-2014-125105 affects the WordPress Broken Link Checker Plugin (up to v1.10.1). The vulnerability resides in the options_page function within core/core.php, where manipulation of the exclusion_list/blc_custom_fields parameter enables cross-site scripting. The issue can be exploited remotely. A ...

CVE-2014-125103

The vulnerability CVE-2014-125103 affects the BestWebSoft Twitter Plugin for WordPress up to version 1.3.2. The issue resides in the function twttr_settings_page (twitter.php), where input manipulation of twttr_url_twitter, bws_license_key, or bws_license_plugin enables cross-site scripting (XSS)...

CVE-2014-125102

creationtimestamp| type| source ---|---|--- 2023-05-30 02:18:07+00:00| seen| https://t.me/cibsecurity/64774...

CVE-2014-125102

CVE-2014-125102 affects the Bestwebsoft Relevant Plugin for WordPress up to version 1.0.7, specifically the Thumbnail Handler component. The vulnerability allows information disclosure and can be exploited remotely. A fix is provided in version 1.0.8, with patch identifier 860d1891025548cf0f5f973...