PT-2022-20160 · Tinymce +1 · Tinymce +1

Name of the Vulnerable Software and Affected Versions: asith-eranga ISIC tour booking versions through the version published on Feb 13th 2018 Description: The issue allows attackers to upload arbitrary files via "/system/application/libs/js/tinymce/plugins/filemanager/dialog.php" and...

Oracle GoldenGate Multiple Vulnerabilities (January 2022 CPU)

The version of Oracle GoldenGate installed on the remote host is affected by the following vulnerabilities as noted in the January 2022 CPU advisory : - Vulnerability in Oracle GoldenGate component: Build Request Apache Xerces-C++. The supported version that is affected is Prior to 21.4.0.0.0...

Security Bulletin: IBM Security Verify Governance is vulnerable to arbitrary code execution due to use of dom4j (CVE-2018-1000632)

Summary IBM Security Verify Governance uses dom4j could allow a remote attacker to execute arbitrary code on the system, caused by improper input validation in multiple methods CVE-2018-1000632. The fix includes upgrading the dom4j jar to the patched version. Vulnerability Details...

Security Bulletin: Vulnerability from Apache Kafka affect IBM Operations Analytics - Log Analysis (CVE-2018-17196)

Summary Apache Kafka is vulnerable to improper input validation that could allow remote attacker to bypass security restrictions. Vulnerability Details CVEID:CVE-2018-17196 DESCRIPTION: Apache Kafka could allow a remote authenticated attacker to bypass security restrictions, caused by improper...

SUSE: Security Advisory (SUSE-SU-2022:4082-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlmaLinux 9 : mingw-zlib (ALSA-2022:8420)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8420 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 Note that Nessus has not...

SUSE-SU-2022:4082-1 Security update for openjpeg

This update for openjpeg fixes the following issues: - CVE-2018-20846: Fixed an Out-of-bounds accesses in pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl in openmj2/pi. bsc1140205 - CVE-2018-21010: Fixed a heap buffer overflow in colorapplyiccprofile in bin/common/color...

MariaDB 10.1.0 < 10.1.37 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.37. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.37 advisory. - The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors...

MariaDB 10.2.0 < 10.2.12

The version of MariaDB installed on the remote host is prior to 10.2.12. It is, therefore, affected by a vulnerability as referenced in the 10.2.12 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Parser. Supported versions that are affected are 5.5.61...

MariaDB 5.5.0 < 5.5.60 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.60. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.60 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are...

MariaDB 10.2.0 < 10.2.13 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.2.13. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.2.13 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.3...

MariaDB 5.5.0 < 5.5.59 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.59. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.59 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Partition. Supported versions that are affected...

MariaDB 10.0.0 < 10.0.34 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.34. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.34 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.3...

MariaDB 5.5.0 < 5.5.61 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.61. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.61 advisory. - Vulnerability in the MySQL Client component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected ar...

Apple WebKit AbstractValue Set Use After Free (CVE-2018-4443)

A use-after-free vulnerability exists in Apple WebKit. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zoho ManageEngine ApplicationManager Command Injection (CVE-2018-7890)

A command injection vulnerability exists in Zoho ManageEngine ApplicationManager. The vulnerability is due to improper validation of the user supplied parameters. A remote attacker can exploit this vulnerability by sending crafted parameters to the target system...

PHP IMAP imap_open Command Injection (CVE-2018-19518)

A command injection vulnerability exists in the IMAP component of PHP. The vulnerability is due to improper handling of the server parameter passed to the imapopen function. A remote, authenticated attacker can exploit this vulnerability by supplying a crafted server parameter to the imapopen...

CVE-2018-1000097 affecting package sharutils for versions less than 4.15.2-20

CVE-2018-1000097 affecting package sharutils for versions less than 4.15.2-20. A patched version of the package is available...

AlmaLinux 9 : zlib (ALSA-2022:4584)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:4584 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. T...

AlmaLinux 9 : rsync (ALSA-2022:4592)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:4592 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. T...