Debian: Security Advisory (DLA-3933-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3933 : dmitry - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3933 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3933-1 [email protected]...

Adobe Photoshop CC 18.1.1 < 18.1.2 / CC 2017.1.1 < 2017.1.2 Multiple Vulnerabilities (macOS APSB17-34)

The version of Adobe Photoshop CC installed on the remote macOS or Mac OS X host is prior to 18.1.2/2017.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb17-34 advisory. - An issue was discovered in Adobe Photoshop 18.1.1 2017.1.1 and earlier versions. An...

Adobe Creative Cloud < 4.0.0.185 Multiple Vulnerabilities (APSB17-13)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 4.0.0.185. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-13 advisory. - Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource...

Adobe Digital Editions < 4.5.7 Multiple Vulnerabilities (APSB17-39) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.7. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-39 advisory. - An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory...

Adobe InDesign 12.0.0 < 13.0.0 Remote Code Execution (APSB17-38) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 13.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB17-38 advisory. - An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exist...

Adobe Digital Editions < 4.5.5 Multiple Vulnerabilities (APSB17-20) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-20 advisory. - Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The...

Adobe Digital Editions < 4.5.5 Multiple Vulnerabilities (APSB17-20)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-20 advisory. - Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The...

Adobe Acrobat < 11.0.20 / 2015.006.30306 / 2017.009.20044 Multiple Vulnerabilities (APSB17-11) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 11.0.20, 2015.006.30306, or 2017.009.20044. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an...

CVE-2017-6199

creationtimestamp| type| source ---|---|--- 2024-10-18 16:25:52+00:00| seen| https://t.me/CyberSecurityTechnologies/858...

CVE-2017-6198

creationtimestamp| type| source ---|---|--- 2024-10-18 16:25:52+00:00| seen| https://t.me/CyberSecurityTechnologies/858...

CVE-2017-6201

creationtimestamp| type| source ---|---|--- 2024-10-18 16:25:52+00:00| seen| https://t.me/CyberSecurityTechnologies/858...

Security Bulletin: The IBM® Engineering Lifecycle Management is impacted by vulnerabilties in Apache Commons Collections

Summary Multiple vulnerabilities have been identified in Apache Commons Collections, which is used in IBM Engineering Lifecycle Management - IBM Jazz. This bulletin contains information regarding vulnerabilities and remediation actions. Vulnerability Details CVEID:CVE-2017-15708 DESCRIPTION: Apac...

SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack

An advanced persistent threat APT actor with suspected ties to India has sprung forth with a flurry of attacks against high-profile entities and strategic infrastructures in the Middle East and Africa. The activity has been attributed to a group tracked as SideWinder, which is also known as...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details...

CVE-2017-20194

creationtimestamp| type| source ---|---|--- 2024-10-16 11:20:57+00:00| seen| https://t.me/cvedetector/8040 2025-10-13 03:20:30+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-20194.yaml 2025-10-14 21:02:26+00:00| seen|...

CVE-2017-20193

creationtimestamp| type| source ---|---|--- 2024-10-16 11:20:56+00:00| seen| https://t.me/cvedetector/8039...

CVE-2017-20192 Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting

The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters submitted during form entries like 'afterhtml' in versions before 2.05.03 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2017-20192 Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting

The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters submitted during form entries like 'afterhtml' in versions before 2.05.03 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

Qnap QTS OS Command Injection (CVE-2017-6361)

QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if descripti...