EulerOS 2.0 SP2 : httpcomponents-client (EulerOS-SA-2019-2518)

According to the version of the httpcomponents-client package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout...

EulerOS 2.0 SP2 : dcraw (EulerOS-SA-2019-2489)

According to the version of the dcraw package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in the ljpegstart function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service crash via a crafted image,...

EulerOS 2.0 SP2 : libxslt (EulerOS-SA-2019-2519)

According to the versions of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This C library allows to transform XML files into other XML files or HTML, text, ... using the standard XSLT stylesheet transformation mechanis...

EulerOS 2.0 SP2 : gnutls (EulerOS-SA-2019-2432)

According to the version of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Double free vulnerability in lib/x509/x509ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have...

EulerOS 2.0 SP2 : pixman (EulerOS-SA-2019-2487)

According to the version of the pixman packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow issue has been reported in the generalcompositerect function in pixman prior to version 0.32.8. An attacker could exploit this...

EulerOS 2.0 SP2 : util-linux (EulerOS-SA-2019-2463)

According to the version of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service crash via a crafted...

EulerOS 2.0 SP2 : pcre (EulerOS-SA-2019-2486)

According to the version of the pcre packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a...

EulerOS 2.0 SP2 : subversion (EulerOS-SA-2019-2504)

According to the versions of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Apache Subversion's moddontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-servic...

EulerOS 2.0 SP2 : libsrtp (EulerOS-SA-2019-2472)

According to the versions of the libsrtp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service crash via vectors related to...

DEBIAN-CVE-2015-7542

A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates...

CVE-2015-7542

CVE-2015-7542 affects libgwenhywfar up to version 4.12.0, caused by the use of outdated bundled CA certificates. Multiple sources (NVD entry and downstream advisories) confirm the vulnerability exists due to trust store handling in the library. Exploitation details are not provided in the documen...

CVE-2015-0837

creationtimestamp| type| source ---|---|--- 2019-12-03 16:02:57+00:00| seen| https://t.me/cibsecurity/8448...

CVE-2015-1855

creationtimestamp| type| source ---|---|--- 2019-12-03 16:02:56+00:00| seen| https://t.me/cibsecurity/8447 2024-03-05 09:12:17+00:00| seen| https://t.me/ctinow/200023...

CVE-2015-2060

creationtimestamp| type| source ---|---|--- 2019-12-03 16:02:56+00:00| seen| https://t.me/cibsecurity/8446 2024-03-05 09:12:18+00:00| seen| https://t.me/ctinow/200024...

CVE-2015-3406

creationtimestamp| type| source ---|---|--- 2019-12-03 16:02:52+00:00| seen| https://t.me/cibsecurity/8445 2024-03-05 09:12:19+00:00| seen| https://t.me/ctinow/200025...

CVE-2015-4457

creationtimestamp| type| source ---|---|--- 2019-12-03 16:02:51+00:00| seen| https://t.me/cibsecurity/8444...

CVE-2015-0837

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

CVE-2015-3406

The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors...

CVE-2015-0837

CVE-2015-0837 affects Libgcrypt (before 1.6.3) and GnuPG (before 1.4.19). It enables a timing side-channel attack on modular exponentiation using a pre-computed table, related to a Last-Level Cache side-channel attack. The description notes the timing differences that could allow an attacker to o...

CVE-2015-2060

cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash...