68526 matches found
SUSE: Security Advisory (SUSE-SU-2024:0300-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 Security Update : xerces-c (SUSE-SU-2024:0300-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0300-1 advisory. - CVE-2018-1311: fixed use-after-free triggered during the scanning of external DTDs potentially leading to DOS. bsc1159552 Tenable has...
SUSE SLES12 Security Update : xerces-c (SUSE-SU-2024:0299-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0299-1 advisory. - CVE-2018-1311: fixed use-after-free triggered during the scanning of external DTDs potentially leading to DOS. bsc1159552 Tenable has...
SUSE-SU-2024:0300-1 Security update for xerces-c
This update for xerces-c fixes the following issues: - CVE-2018-1311: fixed use-after-free triggered during the scanning of external DTDs potentially leading to DOS. bsc1159552...
SUSE-SU-2024:0299-1 Security update for xerces-c
This update for xerces-c fixes the following issues: - CVE-2018-1311: fixed use-after-free triggered during the scanning of external DTDs potentially leading to DOS. bsc1159552...
CVE-2018-4064
creationtimestamp| type| source ---|---|--- 2024-02-01 12:11:17+00:00| seen| https://t.me/ctinow/177508...
CVE-2018-4031
creationtimestamp| type| source ---|---|--- 2024-02-01 12:11:16+00:00| seen| https://t.me/ctinow/177507...
CVE-2018-4002
creationtimestamp| type| source ---|---|--- 2024-02-01 12:11:15+00:00| seen| https://t.me/ctinow/177506...
CVE-2018-3983
creationtimestamp| type| source ---|---|--- 2024-02-01 11:41:37+00:00| seen| https://t.me/ctinow/177495...
CVE-2018-21030
creationtimestamp| type| source ---|---|--- 2024-02-01 09:07:07+00:00| seen| https://t.me/ctinow/177405...
CVE-2018-21029
creationtimestamp| type| source ---|---|--- 2024-02-01 09:07:06+00:00| seen| Telegram/IQK5gkRay4yNjflxSsZeZtQlQFHOPqWX7WOgThDKhixU35...
CVE-2018-18678
creationtimestamp| type| source ---|---|--- 2024-02-01 09:07:04+00:00| seen| https://t.me/ctinow/177403...
FreeBSD : lizard -- Negative size passed to memcpy resulting in memory corruption (67c2eb06-5579-4595-801b-30355be24654)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 67c2eb06-5579-4595-801b-30355be24654 advisory. - In Lizard v1.0 and LZ5 v2.0 the prior release, before the product was renamed, there is an unchecked...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in wget
Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of wget CVE-2018-20483 Vulnerability Details CVEID:CVE-2018-20483 DESCRIPTION: GNU Wget could allow a local authenticated attacker to obtain sensitive information, caused by the storing of the origin URL in the...
CVE-2018-1215
creationtimestamp| type| source ---|---|--- 2024-01-31 14:42:00+00:00| seen| https://t.me/ctinow/176781 2024-01-31 14:42:01+00:00| seen| https://t.me/ctinow/176782 2024-01-31 14:42:03+00:00| seen| https://t.me/ctinow/176783...
Imperva uncovers new Indicators of Compromise for FBI and CISA-flagged AndroxGh0st botnet
On January 16, a joint alert from FBI and CISA warned about a concerning development: the emergence of a botnet driven by AndroxGh0st malware targeting vulnerable applications and web servers. AndroxGh0st is a Python-based malware, first seen in late 2022, designed to target Laravel .env files an...
WordPress is vulnerable to Arbitrary File Upload
Software WordPress Type WordPress Core Vulnerable versions 6.4.3 Fixed in 6.4.3 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2018-14028 Patch priority Low CVSS severity Low 6.6 Developer Claim ownership PSID 87a72ffd6c73 Credits Vinicius Marangoni Required privilege...
GHSA-6WH2-8HW7-JW94 Grafana XSS via adding a link in General feature
Grafana 5.3.1 has XSS via a link on the "Dashboard All Panels General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...