35964 matches found
NewStart CGSL CORE 5.04 / MAIN 5.04 : expat Vulnerability (NS-SA-2020-0077)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has expat packages installed that are affected by a vulnerability: - Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute...
NewStart CGSL CORE 5.05 / MAIN 5.05 : expat Vulnerability (NS-SA-2020-0116)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has expat packages installed that are affected by a vulnerability: - Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute...
Moderate: Red Hat Security Advisory: Red Hat AMQ Broker 7.8 release and security update
Red Hat AMQ Broker 7.8 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2
Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2 Symptoms In Microsoft Dynamics NAV 2015 and Microsoft Dynamics NAV 2013 R2, the Password field is not masked in the Document Service table. Therefore, the field is visible during inspection. To lea...
Microsoft Dynamics Business Central Information Disclosure Vulnerability
Microsoft Dynamics Business Central is an enterprise resource planning system from Microsoft. The system includes features such as financial management, project management, and supply chain management. An information disclosure vulnerability exists in Microsoft Dynamics Business Central. The...
Exploit for CVE-2015-3636
PoC exploit for CVE-2015-3636, a vulnerability in the Linux kernel affecting 32-bit Android OS. The exploit targets the Linux kernel's socket timestamping functionality, specifically the SIOCGSTAMPNS ioctl command. The vulnerability allows an attacker to execute arbitrary code with elevated...
CVE-2015-9551
creationtimestamp| type| source ---|---|--- 2020-11-25 00:47:09+00:00| seen| https://t.me/cibsecurity/16827...
CVE-2015-9550
creationtimestamp| type| source ---|---|--- 2020-11-25 00:47:06+00:00| seen| https://t.me/cibsecurity/16824...
CVE-2015-9550
CVE-2015-9550 affects TOTOLINK A850R-V1 (1.0.1-B20150707.1612) and F1-V2 (1.1-B20150708.1646). A crafted packet sent to the WAN interface can cause the WAN web management interface to be opened. Root cause: reception of a specific hel,xasf packet triggering exposure of the WAN UI. Impact describe...
CVE-2015-9551
The CVE-2015-9551 entry concerns TOTOLINK A850R-V1 (firmware 1.0.1-B20150707.1612) and F1-V2 (firmware 1.1-B20150708.1646) with Remote Code Execution in the management interface via the formSysCmd parameter. The available documents identify the affected products and the attack vector but do not p...
openSUSE Security Update : apache-commons-httpclient (openSUSE-2020-1875)
This update for apache-commons-httpclient fixes the following issues : - http/conn/ssl/SSLConnectionSocketFactory.java ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service HTTPS call hang via unspecified vectors...
Security update for apache-commons-httpclient (important)
openSUSE Security Update: Security update for apache-commons-httpclient Announcement ID: openSUSE-SU-2020:1873-1 Rating: important References: 1178171 945190 Cross-References: CVE-2014-3577 CVE-2015-5262 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now...
CVE-2015-1824
creationtimestamp| type| source ---|---|--- 2020-11-06 02:56:05+00:00| seen| https://t.me/cibsecurity/15923...
CVE-2015-1826
CVE-2015-1826 is a rejected/not used entry and does not represent an active vulnerability.
CVE-2015-1825
CVE-2015-1825 entry is rejected/not used and does not represent an active vulnerability.