CentOS: Security Advisory for thunderbird (CESA-2020:2049)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 7 : libmspack (RHSA-2019:2049)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2049 advisory. The libmspack packages contain a library providing compression and extraction of the Cabinet CAB file format used by Microsoft. Security...

CVE-2019-2049

In SendMediaUpdate and SendFolderUpdate of avrcpservice.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-2049

In SendMediaUpdate and SendFolderUpdate of avrcpservice.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-2049

CVE-2019-2049 involves a memory corruption via a use-after-free in avrcp_service.cc (SendMediaUpdate/SendFolderUpdate), leading to local privilege escalation in the Android Bluetooth service on Android 9. The Android bulletin attributes this as an EoP (High) vulnerability in the System component;...

CVE-2018-2049

...

CVE-2018-2049

CVE-2018-2049 entry is rejected/not used and does not represent an active vulnerability.

CVE-2013-2049

CFME/Red Hat CloudForms 2 Management Engine is affected by a vulnerability caused by a static secret_token.rb secret, enabling remote attackers to tamper sessions. Based on provided sources, the impact is session integrity (high for CVSS3) with network access and no authentication; CVSS2/3 base s...

CVE-2017-2049

...

CVE-2017-2049

CVE-2017-2049 is rejected/not used and does not represent an active vulnerability entry.

BSNL Teracom Router Firmware Rewrite / Link Modification

Multiple Vulnerabilities in TERACOM ROUTER Author: Ajay Gowtham aka AJOXR Contact: gowtham.ajay5 at gmail.com Vulnerability Type: Insecure Upload File Permissions Affected Module: Upload Functionality Criticality: Medium Device Model: BSNL Teracom T2-B-Gawv1.4U10Y-BI is WiFi enabled ADSL2+...

CVE-2016-2049

examples/consumer/common.php in JanRain PHP OpenID library aka php-openid improperly checks the openid.realm parameter against the SERVERNAME element in the SERVER superglobal array, which might allow remote attackers to hijack the authentication of arbitrary users via vectors involving a crafted...

CVE-2016-2049

The CVE-2016-2049 entry describes a vulnerability in the JanRain PHP OpenID library (php-openid), where examples/consumer/common.php improperly compares the openid.realm parameter to the SERVER_NAME value from the SERVER superglobal. This mismatch can allow remote attackers to hijack user authent...

D-Link DCS-931L - Arbitrary File Upload (Metasploit)

Exploit for hardware platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 /alphapd/ def initializeinfo = superupdateinfoinfo, 'Name' = 'D-Link...

CVE-2015-2049

creationtimestamp| type| source ---|---|--- 2016-01-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39192 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlinkdcs931lupload.rb 2025-02-06 03:13:42+00:00| seen...

CVE-2015-2049

CVE-2015-2049 describes an Unrestricted Upload of File with Dangerous Type affecting D-Link DCS-931L and related DCS-93xL family devices. The vulnerability exists in firmware 1.04 and earlier, where an authenticated remote attacker can upload a file with an executable extension, enabling arbitrar...

D-Link DCS-931L File Upload

This module exploits a file upload vulnerability in D-Link DCS-931L network cameras. The setFileUpload functionality allows authenticated users to upload files to anywhere on the file system, allowing system files to be overwritten, resulting in execution of arbitrary commands. This module has be...

Novell Netware XNFS.NLM NFS Rename Remote Code Execution

No description provided by source. Application: Novell Netware XNFS.NLM NFS Rename Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-06 PRL: 2012-02 Author: Francis Provencher Protek Research Lab's...

CVE-2014-2049

The CVE-2014-2049 issue affects ownCloud Server before version 5.0.15 and before 6.0.2, due to insecure default Flash Cross Domain policies. Root cause: insecure cross-domain configuration in Flash policies. Impact: remote attackers could access user files via unspecified vectors. Public advisori...

Ubuntu: Security Advisory (USN-2049-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...