33558 matches found
EulerOS Virtualization 3.0.6.0 : perl (EulerOS-SA-2020-1744)
According to the version of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a deni...
EulerOS Virtualization 3.0.6.0 : perl-Data-Dumper (EulerOS-SA-2020-1782)
According to the version of the perl-Data-Dumper package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to...
EulerOS Virtualization for ARM 64 3.0.6.0 : edk2 (EulerOS-SA-2020-1689)
According to the versions of the edk2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the socket.recvfrominto function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3....
EulerOS 2.0 SP2 : libjpeg-turbo (EulerOS-SA-2020-1664)
According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif...
EulerOS 2.0 SP2 : net-snmp (EulerOS-SA-2020-1621)
According to the version of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The perltrapdhandler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows...
Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2020-1637)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1626)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2020-1621)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
hermanbrusselmans.nl Cross Site Scripting vulnerability OBB-1191479
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
textlocal.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1189414 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Attackers Target 1M+ WordPress Sites To Harvest Database Credentials
Attackers were spotted targeting over one million WordPress websites in a campaign over the weekend. The campaign unsuccessfully attempted to exploit old cross-site scripting XSS vulnerabilities in WordPress plugins and themes, with the goal of harvesting database credentials. The attacks were...
Lexiglot Code Issue Vulnerability
Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. A code issue vulnerability exists in Lexiglot 2014-11-20 and earlier versions. An attacker can exploit the vulnerability with the help of the 'svnurl' parameter to cause the server to send a forged...
FarSite Communications FarLinX X25 Gateway Directory Traversal Vulnerability
FarSite Communications FarLinX X25 Gateway is a gateway product from FarSite Communications, UK. It features a browser interface, online statistics set, connection logging, active session display and status change alerts. A directory traversal vulnerability exists in FarSite Communications FarLin...
Lexiglot Cross-Site Request Forgery Vulnerability
Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. A cross-site request forgery vulnerability exists in Lexiglot 2014-11-20 and earlier versions, which stems from the program failing to properly validate user input. A remote attacker could exploit thi...
FarSite Communications FarLinX X25 Gateway Arbitrary Write Vulnerability
FarSite Communications FarLinX X25 Gateway is a gateway product from FarSite Communications, UK. It features a browser interface, online statistics set, connection logging, active session display and status change alerts. FarSite Communications FarLinX X25 Gateway An arbitrary write vulnerability...
Lexiglot Path Traversal Vulnerability
Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. A path traversal vulnerability exists in Lexiglot 2014-11-20 and earlier versions, which can be exploited by remote attackers to obtain sensitive information full path with the help of...
Lexiglot Information Disclosure Vulnerability (CNVD-2020-36284)
Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. An information disclosure vulnerability exists in Lexiglot 2014-11-20 and earlier versions, which stems from the presence of usernames and passwords on the command line and can be exploited by a local...
Lexiglot Resource Management Error Vulnerability
Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. A resource management error vulnerability exists in Lexiglot 2014-11-20 and earlier versions, which stems from the fact that the api/update.php file uses a large amount of resources when performing sv...
