Advisory ROSA-SA-2023-2112

Software: grub2 2.02 OS: rosa-server79 packageevrstring: grub2-2.02-0.87 CVE-ID: CVE-2022-28733 BDU-ID: 2022-03372 CVE-Crit: HIGH CVE-DESC: A vulnerability in the grubnetrecvip4packets function of the Grub operating systems bootloader program is related to integer overflow. Exploitation of the...

CVE-2022-2112

Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2...

CVE-2022-2112

CVE-2022-2112 corresponds to a CSV injection in Inventree (inventree/inventree) prior to 0.7.2, caused by improper neutralization of formula elements in CSV data (CSV escape filtering). Affected component: CSV export generation in Inventree before version 0.7.2. Impact: potential for formula inje...

Slackware: Security Advisory (SSA:2016-106-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Multiple vulnerabilities in Samba – including Badlock – affect ProtecTIER

Summary Samba vulnerabilities were disclosed on April 12, 2016. Samba is used by ProtecTIER. ProtecTIER has addressed the applicable CVEs including the vulnerability commonly referred to as “Badlock”. Vulnerability Details CVEID: CVE-2016-2118 DESCRIPTION: Samba could allow a remote attacker to...

SUSE: Security Advisory (SUSE-SU-2016:1024-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:1022-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle VirtualBox Security Updates (cpujan2021) - Windows

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Vulnerabilities fixed in Oracle Virtualization

Vulnerabilities have been fixed in Oracle Virtualization/Virtualbox. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data...

CVE-2021-2112

creationtimestamp| type| source ---|---|--- 2021-01-20 18:40:35+00:00| seen| https://t.me/cibsecurity/22402...

CVE-2021-2112

CVE-2021-2112 affects Oracle VM VirtualBox (Core) up to version 6.1.18. The issue enables a locally authenticated attacker with high privileges to cause a hang or crash (DOS) of VirtualBox; attacks may impact other products. A fix is available: upgrade to VirtualBox 6.1.18 or later (upstream/refe...

Debian: Security Advisory (DLA-2112-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2112

CVE-2020-2112 affects Jenkins Git Parameter Plugin (versions

Security Bulletin: Multiple vulnerabilities in Samba, including Badlock, affect IBM i

Summary Samba vulnerabilities were disclosed on April 12, 2016. Samba is used by IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2118 DESCRIPTION: Samba could allow a remote attacker to gain elevated privileges on the system, caused by the acceptance of...

Security Bulletin: Multiple vulnerabilities in ISC BIND and Samba - including Badlock - affect IBM Netezza Host Management

Summary ISC BIND is used by IBM Netezza Host Management. Samba is delivered in IBM Netezza Host Management RHEL 5.11 and 6.6 OS upgrade kits. IBM Netezza Host Management has addressed the applicable CVEs including the vulnerability commonly referred to as "Badlock." Vulnerability Details CVEID:...

RHEL 7 : mod_auth_openidc (RHSA-2019:2112)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2112 advisory. modauthopenidc enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security...

CVE-2019-2112

creationtimestamp| type| source ---|---|--- 2019-07-08 21:00:15+00:00| seen| https://t.me/cveNotify/311...

CVE-2019-2112

CVE-2019-2112 : In Android, memory corruption via a use-after-free in alarm.cc could enable local code execution with no authentication and no user interaction. Affected: Android 8.0, 8.1, and 9.0. Root cause: use-after-free in alarm.cc. Impact: local privilege escalation with high severity per C...

Security Bulletin: Multiple vulnerabilities in Samba – including Badlock - affect IBM Spectrum Scale SMB protocol access method

Summary Samba vulnerabilities were disclosed on April 12, 2016. Samba is used by IBM Spectrum Scale SMB protocol access method. IBM Spectrum Scale has addressed the applicable CVEs including the vulnerability commonly referred to as “Badlock”. Vulnerability Details CVEID: CVE-2016-2118 DESCRIPTIO...

Security Bulletin: Multiple vulnerabilities in Samba affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance

Summary Samba vulnerabilities were disclosed on April 12, 2016. Samba is used by IBM SmartCloud Provisioning for IBM Software Virtual Appliance. IBM SmartCloud Provisioning for IBM Software Virtual Appliance has addressed the applicable CVEs including the vulnerability commonly referred to as...