35960 matches found
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2024-1425)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.11.0 : cpio (EulerOS-SA-2024-1425)
According to the versions of the cpio package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a...
CVE-2015-2987 affecting package ed for versions less than 1.20-1
CVE-2015-2987 affecting package ed for versions less than 1.20-1. A patched version of the package is available...
CVE-2015-7696 affecting package unzip for versions less than 6.0-20
CVE-2015-7696 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...
SUSE-SU-2024:0915-1 Security update for tiff
This update for tiff fixes the following issues: - CVE-2023-41175: Fixed potential integer overflow in raw2tiff.c bsc1214686. - CVE-2023-38288: Fixed potential integer overflow in raw2tiff.c bsc1213590. - CVE-2023-40745: Fixed integer overflow in tiffcp.c bsc1214687. - CVE-2015-8668: Fixed...
Cisco SIP Phone 3905 Resource Limitation Denial of Service (CVE-2015-6391)
Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service resource consumption and functionality loss via a large amount of network traffic, aka Bug ID CSCuh51331. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Cisco Unified IP Phone 9900 Series Arbitrary File Upload (CVE-2015-0604)
The web framework on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424. This plugin only works with Tenable.ot. Please visit...
CVE-2015-8313
creationtimestamp| type| source ---|---|--- 2024-03-16 09:22:06+00:00| seen| https://t.me/ctinow/209429...
CVE-2015-10123
creationtimestamp| type| source ---|---|--- 2024-03-13 10:31:15+00:00| seen| https://t.me/ctinow/206532 2024-03-13 10:31:17+00:00| seen| https://t.me/ctinow/206534...
CVE-2015-10123 Wago: Buffer Copy without Checking Size of Input in wbm of multiple products
An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer overflow will be triggered to gain full access of the device...
CVE-2015-10123
CVE-2015-10123 is a buffer overflow vulnerability described for WAGO products (notably the WAGO Controller BACnet family and related 750-3xx, 750-8xx devices). The issue arises from a buffer copy without checking input size in the WBM (web-based management) page, which can be triggered by unauthe...
CVE-2015-10130
creationtimestamp| type| source ---|---|--- 2024-03-13 04:26:49+00:00| seen| https://t.me/ctinow/206378 2024-03-13 04:31:26+00:00| seen| https://t.me/ctinow/206381...
CVE-2015-10130
CVE-2015-10130 pertains to the WordPress plugin Team Circle Image Slider With Lightbox (version 1.0). The issue is a Cross-Site Request Forgery (CSRF) flaw caused by missing/incorrect nonce validation in the function circle_thumbnail_slider_with_lightbox_image_management_func() . This can allow u...
WordPress Team Circle Image Slider With Lightbox Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Team Circle Image Slider With Lightbox Type Plugin Vulnerable versions = 1.0 Fixed in 1.0.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2015-10130 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4e4875511ed9 Credit...
CVE-2015-3425
creationtimestamp| type| source ---|---|--- 2024-03-09 09:36:27+00:00| seen| https://t.me/ctinow/203854...
CVE-2015-3424
creationtimestamp| type| source ---|---|--- 2024-03-09 09:36:26+00:00| seen| https://t.me/ctinow/203853...
CVE-2015-1853
creationtimestamp| type| source ---|---|--- 2024-03-09 09:11:59+00:00| seen| https://t.me/ctinow/203847...
CVE-2015-0841
creationtimestamp| type| source ---|---|--- 2024-03-09 09:11:58+00:00| seen| https://t.me/ctinow/203846...
Amazon Linux 2023 : cpio (ALAS2023-2024-557)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-557 advisory. cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2015-1197 Tenable has extracted the preceding...