65722 matches found
CVE-2017-18207 affecting package python2 for versions less than 2.7.18-8
CVE-2017-18207 affecting package python2 for versions less than 2.7.18-8. A patched version of the package is available...
CVE-2017-17522 affecting package python2 for versions less than 2.7.18-8
CVE-2017-17522 affecting package python2 for versions less than 2.7.18-8. A patched version of the package is available...
CVE-2017-17969 affecting package p7zip for versions less than 16.02-22
CVE-2017-17969 affecting package p7zip for versions less than 16.02-22. A patched version of the package is available...
PDF Viewing Null Pointer DoS
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of a null pointer. Exploiting these...
CVE-2021-33008
AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity...
CVE-2021-32985
AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid...
CVE-2021-33010
An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught, which may cause a denial-of-service condition...
CVE-2021-32977
AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic signature for data...
Design/Logic Flaw
AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that ca...
CVE-2021-32981
CVE-2021-32981 affects AVEVA System Platform 2017–2020 R2 P01, where external input used to build a pathname can escape a restricted directory. Root cause: improper neutralization of path elements in the pathname, enabling path traversal (CWE-22). Impact is high for confidentiality, integrity, an...
CVE-2017-11400
creationtimestamp| type| source ---|---|--- 2022-04-04 02:27:11+00:00| seen| https://t.me/cibsecurity/40082...
CVE-2017-11401
creationtimestamp| type| source ---|---|--- 2022-04-04 02:27:07+00:00| seen| https://t.me/cibsecurity/40079...
Code injection
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification for a USB stick can be bypassed. NOTE: this issue exists because of an...
Code injection
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401...
CVE-2022-28381
Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932...
Stack overflow
Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932...
CVE-2022-28381
CVE-2022-28381 describes a stack-based (SEH) buffer overflow in ALLMediaServer 1.6, triggered by a long string to TCP port 888, enabling remote code execution. Public sources (Metasploit module for ALLMediaServer 1.6) confirm exploitation against x86/WoW64 targets; no x64 support. The issue is ti...
Security Bulletin: Cloud Pak for Security contains packages that have multiple vulnerabilities
Summary Cloud Pak for Security v1.9.0.0 and earlier may be vulnerable to multiple CVEs through the use of dependency packages. These have been updated in the latest release and vulnerabilities have neen addressed. Please follow the instructions in the Remediation/Fixes section below to update to...