92 matches found
OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967)
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacke...
CentOS: Security Advisory for xorg-x11-server-common (CESA-2021:2033)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
xorg security update
CentOS Errata and Security Advisory CESA-2021:2033 An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Oracle Linux 7 : xorg-x11-server (ELSA-2021-2033)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2033 advisory. 1.20.4-16 - CVE fix for: CVE-2021-3472 1944956 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
SUSE: Security Advisory (SUSE-SU-2017:2033-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2033
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core Components. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2021-2033
CVE-2021-2033 affects Oracle WebLogic Server (Core Components). Affected versions are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The issue is easily exploitable: a low-privileged attacker with network access via HTTP can compromise WebLogic Server, potentially causing a partial denial of ...
Design/Logic Flaw
REDDOXX MailDepot 2033 aka 2.3.3022 allows XSS via an incoming HTML e-mail message...
CVE-2020-26554
REDDOXX MailDepot 2033 (2.3.3022) is affected by a persistent Cross-site Scripting (XSS) in incoming HTML e-mails (CWE-79). The SySS advisory SYSS-2020-037 indicates the vulnerability arises from processing HTML mail, allowing script execution in the context of the user’s browser when viewing mes...
MailDepot 2033 2.3.3022 Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2020-037 Product: MailDepot Manufacturer: REDDOXX GmbH Affected Versions: 2033 2.3.3022 Tested Versions: 2033 2.3.3022 Vulnerability Type: Persistent Cross-site Scripting CWE-79 Risk Level: High Solution Status: Open Manufacturer...
reddoxx maildepot Cross-Site Scripting Vulnerability
reddoxx maildepot reddoxx maildepot is an e-mail archiving software from German reddoxx. The software stores all e-mails automatically and permanently in an archive independent of the mail server. A cross-site scripting vulnerability exists in MailDepot version 2033 2.3.3022, which stems from a...
CVE-2020-2033 GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie
When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks GlobalProtect app can disclose the pre-logon authentication cookie to a man-in-the-middle attacker on the same local area network segment with the ability to manipulate ARP or to conduct ARP spoofing...
CVE-2020-2033
Summary of CVE-2020-2033 Affected product: Palo Alto Networks GlobalProtect app (GlobalProtect Agent), specifically 5.0.x versions before 5.0.10 and 5.1.x versions before 5.1.4, when the pre-logon feature is enabled. Vulnerability and root cause: A missing certificate validation in the GlobalProt...
CVE-2016-2033
CVE-2016-2033 entry is rejected/not used; this CVE ID does not represent an active vulnerability.
Huawei EulerOS: Security Advisory for libsolv (EulerOS-SA-2019-2033)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 7 : patch (RHSA-2019:2033)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2033 advisory. The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes...
CVE-2019-2033
CVE-2019-2033 affects Android 9; the issue is in dnssd_clientstub.c: create_hdr exposes a use-after-free, enabling local privilege escalation with no extra privileges and no user interaction needed. The Android bulletin lists this under the System component as CVE-2019-2033 with Elevation of Priv...