33558 matches found
CVE-2020-2014 PAN-OS: OS injection vulnerability in PAN-OS management server
An OS Command Injection vulnerability in PAN-OS management server allows authenticated users to inject and execute arbitrary shell commands with root privileges. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7...
CVE-2020-2014
CVE-2020-2014 : PAN-OS contains an OS command injection vulnerability in the management server. Authenticated users can inject and execute arbitrary shell commands with root privileges. Affected: PAN-OS 7.1 and 8.0; PAN-OS 8.1 before 8.1.14; PAN-OS 9.0 before 9.0.7. References indicate a fix/patc...
silhouettechile.cl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1157783 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2014-1423
creationtimestamp| type| source ---|---|--- 2020-05-08 02:36:24+00:00| seen| https://t.me/cibsecurity/11936...
CVE-2014-1423
signond before 8.57+15.04.20141127.1-0ubuntu1, as used in Ubuntu Touch, did not properly restrict applications from querying oath tokens due to incorrect checks and the missing installation of the signon-apparmor-extension. An attacker could use this create a malicious click app that collects oau...
CVE-2014-1423
CVE-2014-1423 affects signond used in Ubuntu Touch. The vulnerability arises from incorrect checks that allow applications to query OAuth tokens and from not installing the signon-apparmor-extension.Impact: an attacker could craft a malicious click app to collect OAuth tokens from other apps. No ...
CVE-2014-1423 Online Accounts Signon daemon gives out all oauth tokens to any app
signond before 8.57+15.04.20141127.1-0ubuntu1, as used in Ubuntu Touch, did not properly restrict applications from querying oath tokens due to incorrect checks and the missing installation of the signon-apparmor-extension. An attacker could use this create a malicious click app that collects oau...
VulnCheck KEV: CVE-2014-9727
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm...
RHEL 7 : sqlite (RHSA-2020:2014)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2014 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk...
CVE-2014-2630
creationtimestamp| type| source ---|---|--- 2020-05-01 15:29:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/hpxglanceprivesc.rb 2024-10-09 22:58:28+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/614 2025-02-06...
Security Bulletin: Security vulnerabilities in Apache Tomcat in Rational DOORS Web Access
Summary The Apache Tomcat application server in installations of IBM Rational DOORS Web Access version contains security vulnerabilities. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information...
Security Bulletin: Security vulnerabilities in Rational DOORS (CVE-2014-3613, CVE-2014-3620, CVE-2014-8730, CVE-2014-9495, CVE-2015-0973)
Summary IBM Rational DOORS contains multiple security vulnerabilities. Vulnerability Details Rational DOORS is affected by the following vulnerabilities disclosed in and corrected by Rational DOORS fix pack releases: CVE ID: CVE-2014-3613 Description: cURL/libcURL could allow a remote attacker to...
Security Bulletin: Vulnerability in SSLv3 affects Rational DOORS Web Access (CVE-2014-3566)
Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 can be enabled in IBM Rational DOORS Web Access. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts lik...
Security Bulletin: Vulnerabilities in GSKit affect Rational DOORS (CVE-2015-0138, CVE-2014-6221)
Summary GSKit is an IBM component that is used by IBM Rational DOORS. The GSKit that is shipped with Rational DOORS contains multiple security vulnerabilities including the “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. Rational DOORS has addressed the...
EulerOS Virtualization for ARM 64 3.0.2.0 : perl (EulerOS-SA-2020-1527)
According to the versions of the perl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which mig...
EulerOS Virtualization for ARM 64 3.0.2.0 : libgcrypt (EulerOS-SA-2020-1571)
According to the versions of the libgcrypt package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - DISPUTED The GNU Multiple Precision Arithmetic Library GMP interfaces for PHP through 7.1.4 allow attackers to cause...
EulerOS Virtualization for ARM 64 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2020-1555)
According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file,...
EulerOS Virtualization for ARM 64 3.0.2.0 : edk2 (EulerOS-SA-2020-1574)
According to the versions of the edk2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the socket.recvfrominto function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3....
EulerOS Virtualization for ARM 64 3.0.2.0 : perl-Data-Dumper (EulerOS-SA-2020-1553)
According to the version of the perl-Data-Dumper package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent...
Huawei EulerOS: Security Advisory for libgcrypt (EulerOS-SA-2020-1571)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...