openSUSE: Security Advisory for roundcubemail(SUSE-RU-2024:2017-1)

The remote host is missing an update for the roundcubemail packages announced via the SUSE-RU-2024:2017-1 advisory. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2017-12868

creationtimestamp| type| source ---|---|--- 2024-08-25 08:42:29+00:00| seen| https://t.me/WARLOCKDARKARMYOFFICIALS/4507 2024-08-25 11:49:59+00:00| seen| Telegram/BCpPBhLrKDo8iMPvx3AwjUXyHU4dOqMbMmn4fTKrKNg1isQ...

GHSA-FRP2-5QFC-7R8M request_store has Incorrect Default Permissions

Impact The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not allow access for local users, so the chances of thi...

UBUNTU-CVE-2024-43791

RequestStore provides per-request global storage for Rack. The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not...

request_store has Incorrect Default Permissions

Impact The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not allow access for local users, so the chances of thi...

CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33

CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33. A patched version of the package is available...

CVE-2017-15371 affecting package sox for versions less than 14.4.2.0-33

CVE-2017-15371 affecting package sox for versions less than 14.4.2.0-33. A patched version of the package is available...

USN-6958-1: Libcroco vulnerabilities

It was discovered that Libcroco was incorrectly accessing data structures when reading bytes from memory, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. CVE-2017-7960 It was discovered th...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS : Libcroco vulnerabilities (USN-6958-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6958-1 advisory. It was discovered that Libcroco was incorrectly accessing data structures when reading bytes from memory, which could cause a hea...

CVE-2017-3772

creationtimestamp| type| source ---|---|--- 2024-08-01 00:22:13+00:00| seen| https://t.me/cvedetector/2187...

CVE-2017-3772

A vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow an attacker to cause a system reboot...

CVE-2017-3772

Lenovo PC Manager versions prior to 2.6.40.3154 are vulnerable to a flaw that could allow an attacker with local access to trigger a system reboot. The issue is described across multiple feeds as affecting Lenovo PC Manager, with a recommended fix to upgrade to version 2.6.40.3154 or later. The c...

Ubuntu 16.04 LTS / 18.04 LTS : EDK II vulnerabilities (USN-6920-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6920-1 advisory. It was discovered that EDK II was not properly performing bounds checks in Tianocompress, which could lead to a buffer overflow. An...

Ubuntu: Security Advisory (USN-6920-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6920-1: EDK II vulnerabilities

It was discovered that EDK II was not properly performing bounds checks in Tianocompress, which could lead to a buffer overflow. An authenticated user could use this issue to potentially escalate their privileges via local access. CVE-2017-5731 It was discovered that EDK II had an insufficient...

Dahua Security Cameras Weak Password Recovery Mechanism for Forgotten Password (CVE-2017-9315)

Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by...

PT-2024-10606 · Undefined · Undefined

"Source": "CVE FEED", "Title": "CVE-2017-3766 - CVE-2022-1234: of Acme ", "Content": "CVE ID : CVE-2017-3766 Published : July 29, 2024, 9:15 p.m. | 29 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the...

Dahua Security Cameras Insecure Storage of Sensitive Information (CVE-2017-7253)

Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the fir...

VulnCheck KEV: CVE-2017-1000226

Stop User Enumeration 1.3.8 allows user enumeration via the REST API...

CBL Mariner 2.0 Security Update: sox (CVE-2017-15370)

The version of sox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-15370 advisory. - There is a heap-based buffer overflow in the ImaExpandS function of imarw.c in Sound eXchange SoX 14.4.2. A...