CVE-2022-2838

CVE-2022-2838 affects Eclipse Sphinx prior to 0.13.1. The vulnerability stems from using the Apache Xerces XML Parser without disabling processing of referenced external entities, enabling an attacker to inject arbitrary definitions and access local files, with data exfiltration possible via HTTP...

SUSE: Security Advisory (SUSE-SU-2021:2838-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2061-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2195-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2131-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : file (RHSA-2020:2838)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2838 advisory. The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types,...

CVE-2020-2838

The CVE-2020-2838 entry concerns Oracle E-Business Suite’s CRM Gateway for Mobile Devices (component: Setup of Mobile Applications) and affects supported versions 12.1.1–12.1.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle CRM Gateway for ...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2019-2455)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-2838

The CVE-2019-2838 entry describes a vulnerability in the Oracle Solaris component (Kernel subcomponent) affecting Solaris 11.4. The issue allows an unauthenticated attacker who has network access via NFS to compromise Solaris, potentially leading to unauthorized creation, deletion, or modificatio...

Oracle Solaris Critical Patch Update : jul2019_SRU11_4_10_3_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite component: Zones. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged...

Critical: Red Hat Security Advisory: ceph-iscsi-cli security update

An update for ceph-iscsi-cli is now available for Red Hat Ceph Storage 3.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM Storwize V7000 Unified.

Summary There are security vulnerabilities in versions of Mozilla Firefox that are shipped with versions 1.5.1.0 to 1.5.2.4 of IBM Storwize V7000 Unified. Vulnerability Details IBM Storwize V7000 Unified is shipped with Mozilla Firefox. There are vulnerabilities in certain versions of Mozilla...

Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM SONAS.

Summary There are security vulnerabilities in versions of Mozilla Firefox that are shipped with versions 1.5.1.0 to 1.5.2.4 of IBM SONAS Vulnerability Details IBM SONAS is shipped with Mozilla Firefox. There are vulnerabilities in certain versions of Mozilla Firefox shipped in certain versions of...

CVE-2017-2838

CVE-2017-2838 describes an exploitable denial-of-service in FreeRDP 2.0.0-beta1+android11 caused by how challenge packets are handled. A specially crafted challenge packet can terminate the process, enabling a DoS and potentially allowing an attacker to compromise the server or perform a man-in-t...

CVE-2018-2838

The set of connected documents confirms a concrete vulnerability in Oracle PeopleSoft Enterprise PRTL Interaction Hub (EPPCM_HIER_TOP) for v9.1. CNVD-2018-09218 specifies a remote vulnerability in PeopleSoft PRTL Interaction Hub where an attacker could remotely read, update, insert or delete data...

CVE-2018-2838

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMHIERTOP. The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CentOS Update for dnsmasq CESA-2017:2838 centos6

Check the version of dnsmasq SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882781";...

dnsmasq security update

2.45-1.1.0.1.el5 - Back port fix for CVE-2017-14491 from OL 6 errata ELSA-2017-2838...

Virtuozzo Linux Errata and Security Advisory 2017:2838 Critical

Upstream security update. Follow RHSA-2017:2838 for details...

openSUSE Security Update : freerdp (openSUSE-2017-992)

This update for freerdp fixes the following issues : - CVE-2017-2834: Out-of-bounds write in licenserecv bsc1050714 - CVE-2017-2835: Out-of-bounds write in rdprecvtpktpdu bsc1050712 - CVE-2017-2836: Rdp Client Read Server Proprietary Certificate Denial of Service bsc1050699 - CVE-2017-2837: Clien...