64386 matches found
CVE-2017-11071
This CVE entry is rejected and not used.
CVE-2017-11020
CVE-2017-11020 is rejected/not used; this entry does not represent an active vulnerability.
Debian DLA-2845-1 : libsamplerate - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2845 advisory. An issue has been found in libsamplerate, an audio sample rate conversion library. Using a crafted audio file a buffer over-read might happen in calcoutputsingle in...
Debian: Security Advisory (DLA-2845-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2845-1] libsamplerate security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2845-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 14, 2021 https://wiki.debian.org/LTS -...
Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat
CVE-2017-12617 CVE-2017-12617 is a critical vulnerability lea...
Fix of 56 CVEs
CVE-2017-7223: Fix global buffer overflow of size 1 - CVE-2017-7224: Fix invalid write of size 1 while disassembling - CVE-2017-7225: Fix NULL pointer dereference and an invalid write - CVE-2017-7226: Fix heap-based buffer over-read of size 4049 - CVE-2017-7227: Fix heap-based buffer overflow -...
SUSE-SU-2021:3929-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past jscSLE-22573 You can reenable v...
Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2021-3541 DESCRIPTION: GNOME libxml2 is vulnerable to a denial of service, caused by an exponential entity expansion attack whic...
AT&T Takes Steps to Mitigate Botnet Found Inside Its Network
AT&T is taking action to take down a botnet that had set up shop inside its network, infecting 5,700 VoIP servers that route traffic from enterprise customers to upstream mobile providers. Researchers from Netlab, a network security division of Chinese tech giant Qihoo 360, first discovered what...
openSUSE: Security Advisory for poppler (openSUSE-SU-2021:3854-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLED15: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2021:3854-1)
The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3854-1 advisory. - CVE-2017-18267: Fixed an infinite recursion that would allow remote attackers to cause a denial of service bsc1092945. -...
SUSE: Security Advisory (SUSE-SU-2021:3854-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
New EwDoor Botnet Targeting Unpatched AT&T Network Edge Devices
A newly discovered botnet capable of staging distributed denial-of-service DDoS attacks targeted unpatched Ribbon Communications formerly Edgewater Networks EdgeMarc appliances belonging to telecom service provider AT&T by exploiting a four-year-old flaw in the network appliances. Chinese tech...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Artifex Gsview
PoC exploit for CVE-2017-14947, an RCE vulnerability in Redis 4.x/5.x. The target product/service is Redis, and the vulnerability class/vector is RCE Remote Code Execution. The probable entry point is the RedisModules module, and the execution context is a Python script redis-rce.py that is...
CVE-2017-20008
creationtimestamp| type| source ---|---|--- 2021-11-29 12:33:02+00:00| seen| https://t.me/cibsecurity/33010...
CVE-2017-20008 myCRED < 1.7.8 - Reflected Cross-Site Scripting
The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Points Log admin dashboard, leading to a Reflected Cross-Site Scripting...
CVE-2017-20008
Summary of CVE-2017-20008 : The WordPress plugin myCred (versions prior to 1.7.8) fails to sanitize and escape the user parameter before echoing it back in the Points Log admin dashboard, causing a reflected Cross-Site Scripting (XSS) vulnerability. Root cause: user input is not properly sanitize...