64389 matches found
CVE-2017-8961
creationtimestamp| type| source ---|---|--- 2024-12-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-28 2024-12-30 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-30 2025-01-01 00:00:00+00:00| seen| The Shadowserver...
postgresql security update
9.2.24-9.0.3 - Fixes CVE-2024-10979 where environment variable mutations Orabug: 37370704 - are incorrectly allowed from trusted PL/Perl code...
CVE-2017-18349
creationtimestamp| type| source ---|---|--- 2024-12-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-23 2024-12-27 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-27 2024-12-30 00:00:00+00:00| seen| The Shadowserver...
Ubuntu: Security Advisory (USN-7171-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-7407
creationtimestamp| type| source ---|---|--- 2024-12-18 08:41:20+00:00| seen| https://mastodon.social/users/bagder/statuses/113672931060541852 2024-12-18 09:17:43+00:00| seen| https://vulnerability.circl.lu/comment/942a20f3-cbb3-4457-b3b0-4ddf34d2d6e7...
CVE-2017-9833
creationtimestamp| type| source ---|---|--- 2024-12-16 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-16 2024-12-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-23 2024-12-26 00:00:00+00:00| seen| The Shadowserver...
Oracle Siebel CRM (April 2017 CPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the April 2017 CPU advisory. - Vulnerability in the Siebel Apps - E-Billing component of Oracle Siebel CRM subcomponent: Security Struts 2. Supported versions that are affected are 6.1,...
Oracle Siebel CRM 16.1.x < 16.9 (January 2017 CPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2017 CPU advisory. - Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: EAI. The supported version that is affected is 16.1. Easi...
Oracle Siebel CRM 16.x < 16.16 (July 2017 CPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the July 2017 CPU advisory. - Vulnerability in the Siebel Core CRM component of Oracle Siebel CRM subcomponent: Search. Supported versions that are affected are 16.0 and 17.0. Easily...
K000148899: PostgreSQL vulnerabilities CVE-2018-1058, CVE-2018-1053, CVE-2017-7547, CVE-2017-7486, and CVE-2017-7484
Security Advisory Description CVE-2018-1058 A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are...
CVE-2017-13308
In tscpuwriteGPIOout and mtktsAbtswrite of mtktsAbts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2017-13308
In tscpuwriteGPIOout and mtktsAbtswrite of mtktsAbts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
Cisco NX-OS Improper Encoding or Escaping of Output (CVE-2017-12340)
A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches could allow an authenticated, local attacker to access the Bash shell of an affected device's operating system, even if the Bash...
Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras Use of Password Hash Instead of Password For Authentication (CVE-2017-7927)
A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH- IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC- HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH- HCVR5XXX,...
Cisco NX-OS Command Injection (CVE-2017-12330)
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting...
Cisco NX-OS Command Injection (CVE-2017-12339)
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting...
Cisco NX-OS Improper Input Validation (CVE-2017-12338)
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files. The vulnerability is due to insufficient input validation for a specific CLI command. An attacker could exploit this vulnerability by issuing a crafted...
CVE-2017-13320
In impeg2dbitstreamflush of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead to Remote DoS with no additional execution privileges needed. User interaction is needed for exploitation...