35985 matches found
Description of the security update for the remote code execution vulnerability in Microsoft Visual Studio 2015 Update 3: August 9, 2022 (KB5016316)
None None...
Microsoft Visual Studio 安全漏洞
Microsoft Visual Studio is a family of development tool suites from Microsoft Corporation USA and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. A security vulnerability exists in Microsoft Visual Studio. The following products and...
Microsoft Visual Studio 安全漏洞
Microsoft Visual Studio is a family of development tool suites from Microsoft Corporation USA and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. A security vulnerability exists in Microsoft Visual Studio. The following products and...
Microsoft Visual Studio 代码注入漏洞
Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools from Microsoft Corporation USA that includes most of the tools needed throughout the software life cycle. A code injection vulnerability exists in Microsoft Visual Studio. The...
EulerOS 2.0 SP10 : python3 (EulerOS-SA-2022-2144)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Python aka CPython through 3.10.4, the mailcap module does not add escape characters into commands discovered in the system mailcap file. Th...
EulerOS 2.0 SP10 : python3 (EulerOS-SA-2022-2169)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Python aka CPython through 3.10.4, the mailcap module does not add escape characters into commands discovered in the system mailcap file. Th...
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2022-2169)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: There are multiple security vulnerabilities in Apache Storm used by IBM Tivoli Netcool Manager.
Summary Apache-storm, used by IBM Tivoli Network Manager, contains many internal libraries which are vulnerable to various types of CVEs. Revealing sensitive information CVE-2021-28169, bypassing ACL validations CVE-2018-17196, heap based buffer overflow CVE-2015-5237, denial of service...
Wago IO 750-849 & 750-881 Weak Credential Management (CVE-2015-6472)
WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. C Tenable, Inc. include'compat.inc'; if description scriptid500680;...
Wago IO 750-849 & 750-881 No Privilege Separation (CVE-2015-6473)
WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. C Tenable, Inc. include'compat.inc'; if description scriptid500679; scriptversion"1.5";...
CLSA-2022-1658347744 Fixed CVE-2015-20107 in python2-7.module_el8.5.0+2070+77770ab7.tuxcare.els2
CVE-2015-20107: mailcap: findmatch function does not sanitise the second argument allowing to inject shell commands...
Fixed CVE-2015-20170 in python
CVE-2015-20170: mailcap: findmatch function does not sanitise the second argument allowing to inject shell commands...
CLSA-2022-1658346144 Fix CVE(s): CVE-2015-20107
SECURITY UPDATE: Injection vulnerability - debian/patches/CVE-2015-20107.patch: Make mailcap refuse to match unsafe filenames/types/param in Lib/mailcap.py. - CVE-2015-20107...
USN-5455-1: xmltok library vulnerabilities
Tim Boddy, Gustavo Grieco and others discovered that Expat, that is integrated in xmltok library, incorrectly handled certain files. An attacker could possibly use these issues to cause a denial of service, or possibly execute arbitrary code. These issues were only addressed in Ubuntu 16.04 ESM...
CVE-2015-8031
creationtimestamp| type| source ---|---|--- 2022-07-19 00:39:57+00:00| seen| https://t.me/cibsecurity/46514...
CVE-2015-8031
Hudson aka org.jvnet.hudson.main:hudson-core before 3.3.2 allows XXE attacks...
CVE-2015-8031
CVE-2015-8031 affects Hudson (org.jvnet.hudson.main:hudson-core) before 3.3.2, where a flaw in the XML API processing enables XXE/External Entity Injection, potentially exposing sensitive information from the Hudson master filesystem. Multiple sources (NVD, Red Hat, GHSA, CVE pages) corroborate t...
CVE-2015-10003
FileZilla Server up to 0.9.50 is affected by CVE-2015-10003, with the issue localized in the PORT Handler component. The description indicates an unspecified manipulation yielding an unintended intermediary, and that the issue can be exploited remotely. Upgrading to version 0.9.51 is stated as th...
EulerOS Virtualization 2.10.1 : python3 (EulerOS-SA-2022-2119)
According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Python aka CPython through 3.10.4, the mailcap module does not add escape characters into commands discovered in the system...
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2022-2119)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...