86 matches found
Debian: Security Advisory (DLA-2323)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2323
CVE-2019-2323 describes a lack of validation of user-passed crypto engine data, which can lead to a bus error in Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Compute/Consumer IOT/Industrial IOT, Mobile, Voice & Music, Wearables) across numerous SDM/SDX/SD platforms. Root cause is uninitia...
CVE-2019-12327
Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service is running on port 2323; it cannot be turned off and the credentials cannot be changed...
CVE-2018-2323
CVE-2018-2323 is rejected and not used, and does not represent an active vulnerability entry.
lighttpd < 1.4.35 Multiple Vulnerabilities
According to its banner, the version of lighttpd running on the remote host is prior to 1.4.35. It is, therefore, affected by the following vulnerabilities : - A SQL injection flaw exists in the 'modmysqlvhost' module where user input passed using the hostname is not properly sanitized. A remote...
CVE-2012-2323
CVE-2012-2323 is a reservation duplicate of CVE-2012-2214 and is not an active vulnerability entry.
CVE-2017-2323
A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker crafting packets destined to the device to cause a persistent denial of service to the path computation server service...
CVE-2017-2323
CVE-2017-2323 : Affects Juniper Networks NorthStar Controller Application prior to 2.1.0 Service Pack 1. Vulnerability is a denial of service where a malicious actor sending crafted packets to the device can cause a persistent denial of service to the path computation server service. Documentatio...
CVE-2015-2323
Fortinet FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 are vulnerable when connecting to FortiGuard servers via TLS due to support for weak ciphers (anonymous, export, RC4). This enables MITM attackers to downgrade or spoof TLS traffic. The issue is documented in FG-IR-15-021 and related CVE...
Oracle Solaris Third-Party Patch Update : lighttpd (multiple_vulnerabilities_in_lighttpd)
The remote Solaris system is missing necessary patches to address security updates : - SQL injection vulnerability in modmysqlvhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to requestcheckhostname. CVE-2014-2323 - Multiple...
Amazon Linux AMI : lighttpd (ALAS-2014-346)
Multiple directory traversal vulnerabilities in 1 modevhost and 2 modsimplevhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. dot dot in the host name, related to requestcheckhostname. SQL injection vulnerability in modmysqlvhost.c in lighttpd before 1.4.35...
Ubuntu: Security Advisory (USN-2323-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE Update for lighttpd openSUSE-SU-2014:0496-1 (lighttpd)
Check for the Version of lighttpd OpenVAS Vulnerability Test $Id: gbsuse201404961.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for lighttpd openSUSE-SU-2014:0496-1 lighttpd Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This...
lighttpd to 1.4.35 (important)
lighttpd was updated to version 1.4.35, fixing bugs and security issues: CVE-2014-2323: SQL injection vulnerability in modmysqlvhost.c in lighttpd allowed remote attackers to execute arbitrary SQL commands via the host name, related to requestcheckhostname. CVE-2014-2323: Multiple directory...
Fedora Update for lighttpd FEDORA-2014-3947
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for lighttpd FEDORA-2014-3887
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : lighttpd-1.4.35-1.fc19 (2014-3947)
1.4.35, fixes SA-2014-01, CVE-2014-2323, CVE-2014-2324 1 http://seclists.org/oss-sec/2014/q1/561 2 http://download.lighttpd.net/lighttpd/security/lighttpdsa201401.txt 3 http://www.lighttpd.net/2014/3/12/1.4.35/ Note that Tenable Network Security has extracted the preceding description block...
Fedora 20 : lighttpd-1.4.35-1.fc20 (2014-3887)
1.4.35, fixes SA-2014-01, CVE-2014-2323, CVE-2014-2324 1 http://seclists.org/oss-sec/2014/q1/561 2 http://download.lighttpd.net/lighttpd/security/lighttpdsa201401.txt 3 http://www.lighttpd.net/2014/3/12/1.4.35/ Note that Tenable Network Security has extracted the preceding description block...