153 matches found
CVE-2021-2106
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2021-2106
CVE-2021-2106 affects Oracle E-Business Suite, Oracle Customer Interaction History (Outcome-Result). Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.10. It is an easy-to-exploit, network-access vulnerability that allows an unauthenticated attacker with HTTP access to compromise Oracle Customer I...
SUSE SLES15 Security Update : kernel (SUSE-SU-2020:2106-1)
The SUSE Linux Enterprise 15 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-0305: In cdevget of chardev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with Syst...
RHEL 6 : Red Hat Single Sign-On 7.3.8 security update on RHEL 6 (Important) (RHSA-2020:2106)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2106 advisory. Red Hat Single Sign-On 7.3 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator
Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2107 DESCRIPTION: OpenSSL could allow a remote attacker to...
CVE-2020-2106
CVE-2020-2106 affects Jenkins Code Coverage API Plugin (versions ≤ 1.1.2). The vulnerability is a stored XSS: the plugin does not escape the coverage report filename in its view, enabling a user who can modify a Jenkins job configuration to inject malicious script. Exploitation context is restric...
Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2019-2217)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM i (CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106, CVE-2016-2109, CVE-2016-2176)
Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2108 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary code on the system, caused by...
CVE-2013-2106
creationtimestamp| type| source ---|---|--- 2019-12-03 18:02:17+00:00| seen| https://t.me/cibsecurity/8459 2024-03-05 17:22:23+00:00| seen| https://t.me/ctinow/200463...
CVE-2013-2106
webauth before 4.6.1 has authentication credential disclosure...
CVE-2013-2106
webauth before 4.6.1 has authentication credential disclosure...
CVE-2013-2106
Technical details (affected product, component, version, root cause or fix) are not publicly available in the provided documents; monitor for updates.
CVE-2019-2106
creationtimestamp| type| source ---|---|--- 2019-07-08 21:00:09+00:00| seen| https://t.me/cveNotify/307...
CVE-2019-2106
CVE-2019-2106 affects Android’s Media framework: in ihevcd_sao_shift_ctb of ihevcd_sao.c, a missing bounds check can cause an out-of-bounds write leading to remote code execution. Impacted Android versions include 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. The issue is described in the July 2019 Android...
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware
Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware. IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmwarehas addressed the applicable CVEs...
CVE-2018-2106
CVE-2018-2106 is rejected/not used; this CVE entry does not represent an active vulnerability.
Security Bulletin: Multiple Vulnerabilities in OpenSSL affect Rational Insight
Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by Rational Insight. Rational Insight has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2108 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary code on...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Network Active Bypass (CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106, CVE-2016-2109, CVE-2016-2176)
Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Security Network Active Bypass. IBM Security Network Active Bypass has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2108 DESCRIPTION: OpenSSL could allow a remote...
Security Bulletin: OpenSSL as used in IBM QRadar SIEM is vulnerable to multiple CVE's.
Summary OpenSSL vulnerabilities disclosed on May 3 2016, https://www.openssl.org/news/secadv/20160503.txt plus CVE-2016-2842. Vulnerability Details CVE-ID: CVE-2016-2105 Description: OpenSSL is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the EVPEncodeUpdate...