Fedora: Security Advisory (FEDORA-2024-f750328c3b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : python3.10 (2024-f750328c3b)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f750328c3b advisory. This is a security release of Python 3.10 ----------------------------------------- Note: The release you're looking at is Python 3.10.15, a securit...

Slackware: Security Advisory (SSA:2024-252-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2104-3465

The connected Mageia advisory MGASA-2014-0248 documents CVE-2104-3465 as a NULL pointer dereference in GnuTLS (gnutls_x509_dn_oid_name()) when parsing X.509 certificates with certain OIDs, potentially returning NULL and enabling a buffer overflow on the client during TLS/SSL handshakes, with a se...

CVE-2023-2104 Improper Access Control in alextselegidis/easyappointments

Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

CVE-2023-2104

CVE-2023-2104 affects the easyappointments project (extending across multiple feeds). The vulnerability is described as Improper Access Control in the GitHub repository alextselegidis/easyappointments prior to version 1.5.0. Multiple connected sources confirm that versions 1.4.3 and earlier allow...

SUSE CVE-2008-2104

The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check...

SUSE CVE-2013-2104

python-keystoneclient before 0.2.4, as used in OpenStack Keystone Folsom, does not properly check expiry for PKI tokens, which allows remote authenticated users to 1 retain use of a token after it has expired, or 2 use a revoked token once it expires...

Mahara 安全漏洞

Mahara is a free open source web-based ePortfolio management system from Mahara. A security vulnerability exists in Mahara version 21.04 up to and including version 21.04.7, version 21.10 up to and including version 21.10.5, version 22.04 up to and including version 22.04.3, and version 22.10.0,...

RHEL 7 : rh-ruby25-ruby (RHSA-2021:2104)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2104 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

Ubuntu: Security Advisory (USN-2104-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-2104

creationtimestamp| type| source ---|---|--- 2022-06-24 18:30:57+00:00| seen| https://t.me/cibsecurity/45081...

CVE-2022-2104

The www-data Apache web server account is configured to run sudo with no password for many commands including /bin/sh and /bin/bash...

CVE-2022-2104 Secheron SEPCOS Control and Protection Relay

The www-data Apache web server account is configured to run sudo with no password for many commands including /bin/sh and /bin/bash...

CVE-2022-2104

The CVE-2022-2104 entry concerns the Secheron SEPCOS Control and Protection Relay. The issue is that the www-data (Apache web server) account is configured to run sudo without a password for many commands (including /bin/sh and /bin/bash), enabling potential OS-level privilege escalation. Public ...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1591 more potentially affected by CVE-2020-2104 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.20)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2020-2104 Source advisory: OSV:GHSA-R78Q-QGX6-64PP...

SUSE: Security Advisory (SUSE-SU-2019:2104-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-2104

creationtimestamp| type| source ---|---|--- 2021-01-20 18:40:42+00:00| seen| https://t.me/cibsecurity/22406...

CVE-2021-2104

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2021-2104

The CVE-2021-2104 entry concerns Oracle Complex Maintenance, Repair, and Overhaul (Dialog Box) in Oracle Supply Chain. Affected versions are 11.5.10, 12.1, and 12.2. The issue is a component-level access-control flaw allowing a network-remote, unauthenticated attacker to access or modify data via...