SUSE: Security Advisory (SUSE-SU-2022:3889-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: exiv2 / exiv2-lang / libexiv2-26 / libexiv2-26-32bit / libexiv2-27 / etc (SUSE-SU-2022:3889-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3889-1 advisory. Updated to version 0.27.5 jscPED-1393: - CVE-2017-1000128: Fixed stack out of bounds read in...

Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to denial of service due to CVE-2017-18258

Summary libxml2 is not used directly by IBM App Connect Enterprise Certified Container but is present in the images as part of the base operating system packages. IBM App Connect Enterprise Certified Container may be vulnerable to denial of service. This bulletin provides patch information to...

Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to arbitrary code execution and denial of service due to CVE-2017-15412 and CVE-2016-5131

Summary libxml2 is not used directly by IBM App Connect Enterprise Certified Container but is present in the base operating system packages. IBM App Connect Enterprise Certified Container may be vulnerable to arbitrary code execution and denial of service. This bulletin provides patch information...

VulnCheck KEV: CVE-2017-7199

Nessus 6.6.2 - 6.10.3 contains a flaw related to insecure permissions that may allow a local attacker to escalate privileges when the software is running in Agent Mode. Version 6.10.4 fixes this issue...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-9969)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9969 advisory. - ptp: fix the race between the release of ptpclock and cdev Vladis Dronov Orabug: 31350707 CVE-2020-10690 - xfs: add agf freeblocks verify in...

Exploit for Code Injection in Samba

CVE-2017-7494 SambaCry Exploit Exploit SambaCry CVE-2017-749...

Unbreakable Enterprise kernel security update

4.1.12-124.68.3 - Orabug: 34733462 Alok Tiwari 4.1.12-124.68.2 - ptp: fix the race between the release of ptpclock and cdev Vladis Dronov Orabug: 31350707 CVE-2020-10690 - ptp: Fix pass zero to ERRPTR in ptpclockregister YueHaibing Orabug: 31350707 - chardev: add helper function to register char...

Moxa MXView Denial of Service (CVE-2017-7456)

A denial of service vulnerability exists in Moxa MXView. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

OPENSUSE-SU-2022:10169-1 Security update for libmad

This update for libmad fixes the following issues: - CVE-2017-8373: Fixed a heap-based buffer overflow in madlayerIII boo1036968...

Siemens APOGEE PXC / TALON TC Authentication Bypass

!/usr/bin/env python3 -- coding: utf-8 -- 2022-05-23 Standard Modules from metasploit import module Extra Dependencies dependenciesmissing = False try: import logging import requests import requests import xmltodict import xml.etree.ElementTree as ET import socket import struct import requests...

SUSE SLES12 Security Update : libtasn1 (SUSE-SU-2022:3797-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3797-1 advisory. Security issue fixed: - CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435. - CVE-2017-6891: Added safety check to fix a...

CVE-2017-7455

creationtimestamp| type| source ---|---|--- 2022-10-27 07:41:30+00:00| seen| MISP/b2ae918a-f037-4dc1-8819-f2aa7e0f66f9...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libmad (SUSE-SU-2022:3782-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3782-1 advisory. - CVE-2017-8373: Fixed heap-based buffer overflow in madlayerIII bsc1036968. - CVE-2017-8372:...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS. An attacker exploiting this vulnerability could access sensitive user information. The following products and versions are affected: mac Studio version 2022, Ma...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS. An attacker exploiting this vulnerability could access sensitive user information. The following products and versions are affected: mac Studio version 2022, Ma...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from type obfuscation, where applications may be able to execute arbitrary code with kernel privileges. The following products and versions are...

Apple macOS 资源管理错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from reuse after release, where applications may be able to execute arbitrary code with kernel privileges. The following products and versions are...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that originates from an application that may be able to execute arbitrary code with kernel privileges. The following products and versions are affected: mac Stud...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a security vulnerability that stems from applications that may be able to access sensitive user data. The following products and versions are affected: mac Studio version 2022, Mac Pr...