64 matches found
CVE-2022-2488
A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...
CVE-2022-2488 WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection
A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...
CVE-2022-2488 WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection
A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...
CVE-2022-2488
Summary: CVE-2022-2488 affects WAVLINK WN535K2 and WN535K3 routers. The issue is an OS command injection in the web endpoint /cgi-bin/touchlist_sync.cgi triggered by manipulating the IP parameter. Affected software: WAVLINK WN535K2/WN535K3 (router firmware). Root cause / vulnerability detail (as ...
CVE-2017-2488
CVE-2017-2488 concerns Apple Remote Desktop; a cryptographic weakness in the authentication protocol allowed an attacker to capture cleartext passwords. The issue was mitigated by implementing the Secure Remote Password authentication protocol and is fixed in Apple Remote Desktop 3.9. Remediation...
EulerOS 2.0 SP8 : tar (EulerOS-SA-2021-2488)
According to the versions of the tar package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause...
Debian DLA-2488-2 : python-apt regression update
The update for python-apt released as 2488-1 introduced a regression by causing a segmentation fault, which is now fixed with this update. For Debian 9 stretch, this problem has been fixed in version 1.4.3. We recommend that you upgrade your python-apt packages. For the detailed security status o...
CVE-2010-2488
NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...
CVE-2010-2488
NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...
CVE-2010-2488
CVE-2010-2488 : ZNC before 0.092 contains a NULL pointer dereference in the traffic stats path when there are unauthenticated connections. Affected: ZNC versions prior to 0.092. Root cause: NULL pointer dereference in traffic stats handling. Impact (per sources): availability impact (partial to h...
Oracle E-Business Multiple Vulnerabilities (Jan 2019 CPU)
The version of Oracle E-Business installed on the remote host is missing the January 2019 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the January 2019 Critical Patch Update advisory : - Oracle CRM Technical Foundation Messages component is...
CVE-2019-2488
CVE-2019-2488 affects Oracle E-Business Suite, specifically the Oracle CRM Technical Foundation Session Management subcomponent. The vulnerability allows an unauthenticated attacker with network access via HTTP to read a subset of data from Oracle CRM Technical Foundation. Affected versions inclu...
CVE-2018-2488
Summary (CVE-2018-2488): On Android, a malware app can trigger SAP Fiori Client to crash by sending local push notifications with an empty message. The issue is mitigated by updating to SAP Fiori Client v1.11.5 (Google Play). The provided documents describe the vulnerability as a crash condition ...
openSUSE: Security Advisory for python-Django (openSUSE-SU-2018:2488-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2015-2488
Microsoft Edge memory corruption (MS15-094: CVE-2015-2488) is described as a remote code execution vulnerability caused by improper handling of an object that has not been correctly initialized or has been deleted. An attacker could lure a user to open a specially crafted webpage to trigger the v...
About the security content of Apple Remote Desktop 3.9 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
About the security content of Apple Remote Desktop 3.9
About the security content of Apple Remote Desktop 3.9 This document describes the security content of Apple Remote Desktop 3.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
CVE-2016-2488
CVE-2016-2488 affects the Qualcomm camera driver in Android before 2016-06-01 on Nexus devices (N5, N5X, N6, N6P, N7 2013). The vulnerability is an elevation of privilege via a crafted application, linked to internal bug 27600832. The issue is addressed in the June 2016 Android bulletin; patch le...
Debian DLA-313-1 : virtualbox-ose security update
The latest maintenance release of the VirtualBox OSE 3.2.x series i.e., version 3.2.28 has been uploaded to Debian LTS squeeze. Thanks to Gianfranco Costamagna for preparing packages for review and upload by the Debian LTS Team. Unfortunately, Oracle no longer provides information on specific...