Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2022-1913)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : zlib (EulerOS-SA-2022-1920)

According to the versions of the zlib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 Note that...

CVE-2018-18907

An issue was discovered on D-Link DIR-850L 1.21WW devices. A partially completed WPA handshake is sufficient for obtaining full access to the wireless network. A client can access the network by sending packets on Data Frames to the AP without encryption...

Security Bulletin: Apache Kafka as used by IBM QRadar SIEM is vulnerable to information disclosure (CVE-2021-38153, CVE-2018-17196)

Summary Apache Kafka as used by IBM QRadar SIEM is vulnerable to information disclosure. IBM has addressed the relevant CVEs. Vulnerability Details CVEID:CVE-2021-38153 DESCRIPTION: Apache Kafka could allow a remote attacker to obtain sensitive information, caused by a timing attack flaw due to t...

Security Bulletin: Pip as used by IBM QRadar Advisor With Watson is vulnerable to multiple vulnerabilities (CVE-2019-20916, CVE-2021-3572, CVE-2018-20225)

Summary Pip as used by IBM QRadar Advisor With Watson to manage python packages is vulnerable to multiple vulnerabilities. IBM QRadar Advisor With Watson has addressed the applicable CVEs by updating pip. Vulnerability Details CVEID: CVE-2019-20916 DESCRIPTION: pypa pip package for python could...

SUSE: Security Advisory (SUSE-SU-2022:2077-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : openjpeg2 (EulerOS-SA-2022-1872)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this...

CVE-2018-15728

creationtimestamp| type| source ---|---|--- 2022-06-14 20:18:16+00:00| seen| https://t.me/cibsecurity/44427...

Ubuntu 16.04 ESM : rsync vulnerability (USN-5359-2)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5359-2 advisory. USN-5359-1 fixed vulnerabilities in rsync. This update provides the corresponding updates for Ubuntu 16.04 ESM. Tenable has extracted the preceding description...

CVE-2018-25038

creationtimestamp| type| source ---|---|--- 2022-06-12 12:17:18+00:00| seen| https://t.me/cibsecurity/44240...

CVE-2018-25036

creationtimestamp| type| source ---|---|--- 2022-06-12 12:17:14+00:00| seen| https://t.me/cibsecurity/44239...

CVE-2018-25035

creationtimestamp| type| source ---|---|--- 2022-06-12 12:17:13+00:00| seen| https://t.me/cibsecurity/44238...

CVE-2018-25034

creationtimestamp| type| source ---|---|--- 2022-06-12 12:17:12+00:00| seen| https://t.me/cibsecurity/44237...

CVE-2018-25039

creationtimestamp| type| source ---|---|--- 2022-06-12 12:17:11+00:00| seen| https://t.me/cibsecurity/44236...

CVE-2018-25037

creationtimestamp| type| source ---|---|--- 2022-06-12 12:17:10+00:00| seen| https://t.me/cibsecurity/44235...

CVE-2018-25038

A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The manipulation of the argument PppUserName with the input alert1 as part of POST Request leads to cross site scripting Persistent. It is possib...

CVE-2018-25037

A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/RgDdns. The manipulation of the argument DdnsHostName with the input alert1 as part of POST Request leads to cross site scripting...

CVE-2018-25039

A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlBlock.asp. The manipulation of the argument BasicParentalNewKeyword with the input alert1 as part of POST Request leads to cross site...

CVE-2018-25036

A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1/TimeServer2/TimeServer3 with the input alert1 as part of POST Request lead...

CVE-2018-25035

A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input alert1 as part of POST Request leads to cross site scripting...