123 matches found
CVE-2019-18352
CVE-2019-18352 affects PHOENIX CONTACT FL NAT 2208 (pre‑V2.90) and FL NAT 2304-2GC-2SFP (pre‑V2.90). The issue is improper access control when MAC‑based port security is used. Public sources describe this as a vulnerability with potential integrity impact and partial availability impact. No explo...
CVE-2019-18352
Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices before V2.90 when using MAC-based port security...
Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2019-2604)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2019-2202)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2304
CVE-2019-2304 describes an integer overflow that can lead to a buffer overflow due to insufficient validation of firmware event arguments. Affects Snapdragon platforms (e.g., IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM9xxx, SDM/B series) across multiple product families (Auto, Electronics Connectivit...
CVE-2019-2304
creationtimestamp| type| source ---|---|--- 2019-12-11 03:00:17+00:00| seen| https://t.me/indoghostsec/731 2019-12-11 16:24:35+00:00| seen| https://t.me/indoghostsec/751 2019-12-13 11:21:12+00:00| seen| Telegram/iQUZE2pIByE4vkwExY2sw7tjReCcmi36nOFNFwktNW4 2019-12-14 01:31:35+00:00| seen|...
CVE-2014-2304
creationtimestamp| type| source ---|---|--- 2019-10-23 22:32:08+00:00| seen| https://t.me/cibsecurity/7618 2024-01-17 15:37:04+00:00| seen| https://t.me/ctinow/169302...
RHEL 7 : openssl (RHSA-2019:2304)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2304 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
CVE-2018-2304
CVE-2018-2304 is rejected/not used and does not represent an active vulnerability entry.
Juniper Networks Junos OS QFX and EX Series Information Disclosure Vulnerability (JSA10773, Etherleak)
Junos OS on QFX and EX series is prone to an information disclosure vulnerability also known as SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD-SA-16:22.libarchive
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:22.libarchive Security Advisory The FreeBSD Project Topic: Directory traversal in cpio1 Category: contrib Module: libarchive Announced: 2016-05-31 Credits:...
CVE-2016-2304
CVE-2016-2304 affects Ecava IntegraXor prior to version 5.0, build 4522. The issue is that the HTTPOnly flag is not set on the session cookie in the web server, enabling a remote attacker to access the cookie via scripts and potentially log in as an administrator. Public sources describe this as ...
SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2015:0667-1)
libarchive was updated to fix a directory traversal in the bsdcpio tool, which allowed attackers supplying crafted archives to overwrite files. CVE-2015-2304 Also, a integer overflow was fixed that could also overflow buffers. CVE-2013-0211 Note that Tenable Network Security has extracted the...
Ubuntu: Security Advisory (USN-2549-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2549-1: libarchive vulnerabilities
It was discovered that the libarchive bsdcpio utility extracted absolute paths by default without using the --insecure flag, contrary to expectations. If a user or automated system were tricked into extracting cpio archives containing absolute paths, a remote attacker may be able to write to...
openSUSE Security Update : libarchive (openSUSE-2015-248)
libarchive was updated to fix a directory traversal in the bsdcpio tool, which allowed attackers supplying crafted archives to overwrite files. CVE-2015-2304 Also, a integer overflow was fixed that could also overflow buffers. CVE-2013-0211 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
SUSE-SU-2015:0667-1 Security update for libarchive
libarchive was updated to fix a directory traversal in the bsdcpio tool, which allowed attackers supplying crafted archives to overwrite files. CVE-2015-2304 Also, a integer overflow was fixed that could also overflow buffers. CVE-2013-0211...
CVE-2015-2304
Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive...
CVE-2015-2304
CVE-2015-2304 is a vulnerability in libarchive's bsdcpio (libarchive 3.1.2 and earlier) that allows an attacker to write to arbitrary files by supplying a full pathname in an archive (absolute path traversal). Connected advisories (e.g., EulerOS, RHEL/SUSE OpenVAS/NASL entries) enumerate this CVE...