EulerOS 2.0 SP2 : sblim-sfcb (EulerOS-SA-2019-2365)

According to the version of the sblim-sfcb package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service NULL pointer...

EulerOS 2.0 SP2 : audit (EulerOS-SA-2019-2385)

According to the version of the audit packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.CVE-2015-5186 Note that Tenable Network Security has extracted the...

EulerOS 2.0 SP2 : socat (EulerOS-SA-2019-2359)

According to the version of the socat package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service process freeze or...

CVE-2015-3424

SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter...

CVE-2015-3425

Cross-site scripting XSS vulnerability in Accentis Content Resource Management System before October 2015 patch allows remote attackers to inject arbitrary web script or HTML via the ctl00$cphcontent$uigformState parameter...

CVE-2015-7892

Stack-based buffer overflow in the m2m1shotcompatioctl32 function in the Samsung m2m1shot driver framework, as used in Samsung S6 Edge, allows local users to have unspecified impact via a large data.bufout.numplanes value in an ioctl call...

CVE-2015-7892

CVE-2015-7892 affects the Samsung m2m1shot driver framework (Samsung Galaxy S6 Edge). A stack-based overflow in the m2m1shot_compat_ioctl32 function allows a local user to trigger an overflow via a large data.buf_out.num_planes in an ioctl. Exploitation was demonstrated publicly (see exploit-db 3...

CVE-2015-0841

Off-by-one error in the readBuf function in listener.cpp in libcapsinetwork and monopd before 0.9.8, allows remote attackers to cause a denial of service crash via a long line...

UBUNTU-CVE-2015-0841

Off-by-one error in the readBuf function in listener.cpp in libcapsinetwork and monopd before 0.9.8, allows remote attackers to cause a denial of service crash via a long line...

CVE-2015-3424

CVE-2015-3424 affects Accentis Content Resource Management System. A SQL injection vulnerability exists in the SIDX parameter that allows remote attackers to execute arbitrary SQL commands. The issue is tied to input filtering flaws prior to the October 2015 patch; patched versions released aroun...

CVE-2015-3425

Cross-site scripting XSS vulnerability in Accentis Content Resource Management System before October 2015 patch allows remote attackers to inject arbitrary web script or HTML via the ctl00$cphcontent$uigformState parameter...

CVE-2015-3425

CVE-2015-3425 is a stored XSS vulnerability in Accentis Content Resource Management System, exploitable via the parameter ctl00$cph_content$_uig_formState. Multiple connected sources confirm the issue affects Accentis CRM/resource management software prior to the October 2015 patch and that authe...

CVE-2015-1853

CVE-2015-1853 affects chrony with DoS via symmetric NTP associations. Debian/Red Hat/Gentoo advisories describe three related issues: (1) CVE-2015-1853 — symmetric-association state variables could be overwritten by an attacker’s packet, preventing synchronization. (2) CVE-2015-1821 — subnet-size...

CVE-2015-0841

CVE-2015-0841 describes an off-by-one error in the readBuf function of listener.cpp used by libcapsinetwork and monopd prior to version 0.9.8. The bug allows remote attackers to trigger a denial of service (crash) by sending a specially long line, as reported in multiple sources. The connected do...

EulerOS 2.0 SP5 : screen (EulerOS-SA-2019-2548)

According to the version of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial o...

EulerOS 2.0 SP2 : libxslt (EulerOS-SA-2019-2519)

According to the versions of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This C library allows to transform XML files into other XML files or HTML, text, ... using the standard XSLT stylesheet transformation mechanis...

EulerOS 2.0 SP2 : gnutls (EulerOS-SA-2019-2432)

According to the version of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Double free vulnerability in lib/x509/x509ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have...

EulerOS 2.0 SP2 : util-linux (EulerOS-SA-2019-2463)

According to the version of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service crash via a crafted...

EulerOS 2.0 SP2 : dcraw (EulerOS-SA-2019-2489)

According to the version of the dcraw package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in the ljpegstart function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service crash via a crafted image,...

EulerOS 2.0 SP2 : subversion (EulerOS-SA-2019-2504)

According to the versions of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Apache Subversion's moddontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-servic...