100 matches found
CVE-2022-2057
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...
CVE-2021-2057
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 19.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2021-2057
CVE-2021-2057 affects Oracle Retail Customer Management and Segmentation Foundation (Internal Operations) in the 19.0 release. The vulnerability enables a low-privileged, network-accessible attacker (HTTP) to modify and read data within the affected component and potentially cause partial denial ...
CVE-2013-2057
YaBB through 2.5.2 is affected by a Local File Include vulnerability caused by the 'guestlanguage' cookie parameter, enabling inclusion of local files due to improper handling of the cookie value. Affected product/component: YaBB (web forum) up to version 2.5.2. Root cause: unsanitized cookie par...
Debian DLA-2057-1 : pillow security update
It was discovered that there were three vulnerabilities in Pillow, an imaging library for the Python programming language : - CVE-2019-19911: Prevent a denial of service vulnerability caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is...
RHEL 7 : bind (RHSA-2019:2057)
"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2057 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C Tenable...
CVE-2018-2057
CVE-2018-2057 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-2057
CVE-2017-2057 is rejected/not used; the entry does not represent an active vulnerability.
CVE-2016-2057
The CVE-2016-2057 issue affects Xymon 4.1.x, 4.2.x, and 4.3.x up to 4.3.25, where an internal IPC message queue is created with weak permissions (666). This allows a local user to inject arbitrary messages by writing to the queue, bypassing network ACLs. Related advisories (Debian DSA-3495-1; Mag...
Debian DSA-3495-1 : xymon - security update
Markus Krell discovered that xymon, a network- and applications-monitoring system, was vulnerable to the following security issues : - CVE-2016-2054 The incorrect handling of user-supplied input in the 'config' command can trigger a stack-based buffer overflow, resulting in denial of service via...
[SECURITY] [DSA 3495-1] xymon security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3495-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 29, 2016 https://www.debian.org/security/faq -...
Xymon 4.3.x Buffer Overflow / Code Execution / Information Disclosure
Hi, Multiple security issues have been found in the server component of the Xymon monitoring system. These issues affect all versions of Xymon 4.3.x prior to 4.3.25, as well as the obsolete 4.1.x and 4.2.x versions. All issues have been resolved in Xymon 4.3.25, released on Feb 8 2016. It is...
CVE-2014-2057
CVE-2014-2057 affects the open-source file sync and share platform ownCloud . The vulnerability is described as multiple XSS vulnerabilities in versions before 6.0.2 , allowing remote attackers to inject arbitrary web script or HTML through unspecified vectors. The root cause is cross-site script...
Ubuntu: Security Advisory (USN-2057-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-2057
Cross-site request forgery CSRF vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI...
Sql injection
Oracle Mojarra uses an encrypted View State without a Message Authentication Code MAC, which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057...
CVE-2010-2057
CVE-2010-2057 affects Apache MyFaces: shared/util/StateUtils.java uses an encrypted View State without a Message Authentication Code (MAC) in MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1. The underlying issue is lack of MAC protection on the serialized View State, enabli...
CVE-2010-4007
Oracle Mojarra uses an encrypted View State without a Message Authentication Code MAC, which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057...