68549 matches found
New EnemyBot DDoS Botnet Borrows Exploit Code from Mirai and Gafgyt
A threat group that pursues crypto mining and distributed denial-of-service DDoS attacks has been linked to a new botnet called Enemybot, which has been discovered enslaving routers and Internet of Things IoT devices since last month. "This botnet is mainly derived from Gafgyt's source code but h...
VulnCheck KEV: CVE-2018-6882
Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML...
[SECURITY] [DLA 2981-1] lrzip security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2981-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler April 13, 2022 https://wiki.debian.org/LTS -...
Ubuntu: Security Advisory (USN-5331-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-V6GP-9MMM-C6P5 Out-of-bounds Write in zlib affects Nokogiri
Summary Nokogiri v1.13.4 updates the vendored zlib from 1.2.11 to 1.2.12, which addresses CVE-2018-25032. That CVE is scored as CVSS 7.4 "High" on the NVD record as of 2022-04-05. Please note that this advisory only applies to the CRuby implementation of Nokogiri = v1.13.4. Impact CVE-2018-25032 ...
Out-of-bounds Write in zlib affects Nokogiri
Summary Nokogiri v1.13.4 updates the vendored zlib from 1.2.11 to 1.2.12, which addresses CVE-2018-25032. That CVE is scored as CVSS 7.4 "High" on the NVD record as of 2022-04-05. Please note that this advisory only applies to the CRuby implementation of Nokogiri = v1.13.4. Impact CVE-2018-25032 ...
USN-5331-2 tcpdump vulnerabilities
USN-5331-1 fixed several vulnerabilities in tcpdump. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that tcpdump incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial o...
Out-of-bounds Write in zlib affects Nokogiri
Summary Nokogiri v1.13.4 updates the vendored zlib from 1.2.11 to 1.2.12, which addresses CVE-2018-25032. That CVE is scored as CVSS 7.4 "High" on the NVD record as of 2022-04-05. Please note that this advisory only applies to the CRuby implementation of Nokogiri = v1.13.4. Impact CVE-2018-25032 ...
Ubuntu 18.04 LTS / 20.04 LTS : tcpdump vulnerabilities (USN-5331-2)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5331-2 advisory. USN-5331-1 fixed several vulnerabilities in tcpdump. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS...
CVE-2018-16880 affecting package kernel for versions less than 5.10.78.1-1
CVE-2018-16880 affecting package kernel for versions less than 5.10.78.1-1. A patched version of the package is available...
CVE-2018-1000026 affecting package kernel for versions less than 5.10.78.1-1
CVE-2018-1000026 affecting package kernel for versions less than 5.10.78.1-1. A patched version of the package is available...
CVE-2018-14348 affecting package libcgroup for versions less than 0.41-23
CVE-2018-14348 affecting package libcgroup for versions less than 0.41-23. A patched version of the package is available...
CVE-2018-20574 affecting package yaml-cpp for versions less than 0.6.2-6
CVE-2018-20574 affecting package yaml-cpp for versions less than 0.6.2-6. A patched version of the package is available...
CVE-2018-10906 affecting package fuse for versions less than 2.9.7-10
CVE-2018-10906 affecting package fuse for versions less than 2.9.7-10. A patched version of the package is available...
CVE-2018-16301 affecting package tcpdump for versions less than 4.99.1-1
CVE-2018-16301 affecting package tcpdump for versions less than 4.99.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2018-5996 affecting package p7zip for versions less than 16.02-22
CVE-2018-5996 affecting package p7zip for versions less than 16.02-22. A patched version of the package is available...
CVE-2018-1000035 affecting package unzip for versions less than 6.0-19
CVE-2018-1000035 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...
CVE-2018-18384 affecting package unzip for versions less than 6.0-19
CVE-2018-18384 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...