Fedora 38 : xerces-c (2023-52ba628e03)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-52ba628e03 advisory. Update to 3.2.5, fixing CVE-2018-1311 and CVE-2023-37536 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 39 : xerces-c (2023-817ecc703f)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-817ecc703f advisory. Update to 3.2.5, fixing CVE-2018-1311 and CVE-2023-37536 Tenable has extracted the preceding description block directly from the Fedora security...

OESA-2023-1989 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

CVE-2018-11409

creationtimestamp| type| source ---|---|--- 2023-12-28 16:51:30+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/splunkrawserverinfo.rb 2023-12-31 00:15:08+00:00| seen| https://t.me/arpsyndicate/2262 2024-12-23 00:00:00+00:00| seen| The Shadowserver...

K000138056: Wireshark vulnerability CVE-2018-14438

Security Advisory Description In Wireshark through 2.6.2, the createapprunningmutex function in wsutil/fileutil.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attackers to modify the access control arbitrarily. CVE-2018-14438 Impact There is no impact; F5 products are not...

CVE-2018-8088

creationtimestamp| type| source ---|---|--- 2023-12-27 15:32:17+00:00| seen| https://t.me/ctinow/159642...

CVE-2018-1133

creationtimestamp| type| source ---|---|--- 2023-12-22 19:47:54+00:00| seen| https://t.me/arpsyndicate/2067 2024-04-24 20:30:04+00:00| seen| https://t.me/arpsyndicate/4813...

CVE-2018-8823

creationtimestamp| type| source ---|---|--- 2023-12-22 17:57:58+00:00| seen| https://t.me/arpsyndicate/2061 2023-12-22 18:52:54+00:00| seen| https://t.me/arpsyndicate/2062 2024-11-26 09:06:49+00:00| seen| MISP/d0f67a25-b270-45aa-a235-c5da1f5eb45f...

CVE-2018-25094

creationtimestamp| type| source ---|---|--- 2023-12-22 09:22:13+00:00| seen| https://t.me/ctinow/158261...

SUSE: Security Advisory (SUSE-SU-2023:4942-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:4942-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2018-20662: PDFDoc setup in PDFDoc.cc allows attackers to cause DOS because of a wrong return value from PDFDoc:setup bsc1120956...

SUSE-SU-2023:4941-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2017-7511: Fixed a NULL pointer dereference in pdfunite bsc1041783 - CVE-2018-20662: PDFDoc setup in PDFDoc.cc allows attackers to cause DOS because of a wrong return value from PDFDoc:setup bsc1120956...

SUSE SLES12: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2023:4942-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4942-1 advisory. - CVE-2018-20662: PDFDoc setup in PDFDoc.cc allows attackers to cause DOS because of a wrong return value from PDFDoc:setup bsc1120956...

USN-6558-1: audiofile vulnerabilities

It was discovered that audiofile could be made to dereference invalid memory. If a user or an automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS...

Security Bulletin: Watson Machine Learning Accelerator on Cloud Pak for Data Version is affected by multiple vulnerabilties

Summary Mutiple open source vulnerabilties affects Watson Machine Learning Accelerator on Cloud Pak for Data Version 2.3.3 and have been addressed in version 2.3.4. Vulnerability Details CVEID:CVE-2021-23566 DESCRIPTION: Nanoid could allow a local attacker to obtain sensitive information, caused ...

CVE-2018-16153

An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations...

CVE-2018-16153

An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations...

CVE-2018-16153

CVE-2018-16153 affects Opencast 4.x–10.x prior to 10.6, where authentication attempts to external services may transmit system digest credentials. The issue arises when Opencast sends credentials during authentication against arbitrary external services inside some workflows, potentially exposing...

K000137875: PostGreSQL vulnerability CVE-2018-1058

Security Advisory Description A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...

sequoiatees-dcs.com Improper Access Control vulnerability OBB-3810518

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...