CVE-2018-25041 uTorrent JSON RPC Server privileges management

A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be...

CVE-2018-25040 uTorrent Web HTTP RPC Server privileges management

A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HTTP RPC Server. The manipulation leads to privilege escalation. The attack can be launched remotely. The exploit has been disclosed to the publ...

CVE-2018-18907

creationtimestamp| type| source ---|---|--- 2022-06-17 02:22:04+00:00| seen| https://t.me/cibsecurity/44704...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Exempi vulnerabilities (USN-5483-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5483-1 advisory. It was discovered that Exempi incorrectly handled certain media files. If a user or automated system were tricked into opening a...

Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2022-1913)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : zlib (EulerOS-SA-2022-1920)

According to the versions of the zlib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 Note that...

CVE-2018-18907

An issue was discovered on D-Link DIR-850L 1.21WW devices. A partially completed WPA handshake is sufficient for obtaining full access to the wireless network. A client can access the network by sending packets on Data Frames to the AP without encryption...

Security Bulletin: Apache Kafka as used by IBM QRadar SIEM is vulnerable to information disclosure (CVE-2021-38153, CVE-2018-17196)

Summary Apache Kafka as used by IBM QRadar SIEM is vulnerable to information disclosure. IBM has addressed the relevant CVEs. Vulnerability Details CVEID:CVE-2021-38153 DESCRIPTION: Apache Kafka could allow a remote attacker to obtain sensitive information, caused by a timing attack flaw due to t...

Security Bulletin: Pip as used by IBM QRadar Advisor With Watson is vulnerable to multiple vulnerabilities (CVE-2019-20916, CVE-2021-3572, CVE-2018-20225)

Summary Pip as used by IBM QRadar Advisor With Watson to manage python packages is vulnerable to multiple vulnerabilities. IBM QRadar Advisor With Watson has addressed the applicable CVEs by updating pip. Vulnerability Details CVEID: CVE-2019-20916 DESCRIPTION: pypa pip package for python could...

SUSE: Security Advisory (SUSE-SU-2022:2077-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : openjpeg2 (EulerOS-SA-2022-1872)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this...

CVE-2018-15728

creationtimestamp| type| source ---|---|--- 2022-06-14 20:18:16+00:00| seen| https://t.me/cibsecurity/44427...

Ubuntu 16.04 ESM : rsync vulnerability (USN-5359-2)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5359-2 advisory. USN-5359-1 fixed vulnerabilities in rsync. This update provides the corresponding updates for Ubuntu 16.04 ESM. Tenable has extracted the preceding description...

CVE-2018-25038

creationtimestamp| type| source ---|---|--- 2022-06-12 12:17:18+00:00| seen| https://t.me/cibsecurity/44240...

CVE-2018-25036

creationtimestamp| type| source ---|---|--- 2022-06-12 12:17:14+00:00| seen| https://t.me/cibsecurity/44239...

CVE-2018-25035

creationtimestamp| type| source ---|---|--- 2022-06-12 12:17:13+00:00| seen| https://t.me/cibsecurity/44238...

CVE-2018-25034

creationtimestamp| type| source ---|---|--- 2022-06-12 12:17:12+00:00| seen| https://t.me/cibsecurity/44237...

CVE-2018-25039

creationtimestamp| type| source ---|---|--- 2022-06-12 12:17:11+00:00| seen| https://t.me/cibsecurity/44236...

CVE-2018-25037

creationtimestamp| type| source ---|---|--- 2022-06-12 12:17:10+00:00| seen| https://t.me/cibsecurity/44235...

CVE-2018-25038

A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The manipulation of the argument PppUserName with the input alert1 as part of POST Request leads to cross site scripting Persistent. It is possib...