CVE-2020-2896

CVE-2020-2896 affects the MySQL Server (Oracle MySQL), specifically the Server: Information Schema component. Affected are 8.0.19 and earlier. The vulnerability allows a high-privilege attacker who has network access via multiple protocols to cause the MySQL Server to hang or crash (complete deni...

CVE-2014-2896

The DoAlert function in wolfSSL/CyaSSL TLS and DTLS implementations is affected by CVE-2014-2896 prior to version 2.9.4. The vulnerability allows remote attackers to trigger memory corruption or an out-of-bounds read over the network, with the impact described as unspecified in the primary entry....

CVE-2014-2896

The DoAlert function in the 1 TLS and 2 DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors, which trigger memory corruption or an out-of-bounds read...

Huawei EulerOS: Security Advisory for libXfont (EulerOS-SA-2019-2357)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1526)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2019:2896-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage bsc1146213. CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser bsc1146212. CVE-2019-15141: Fixed a divide-by-zero vulnerabili...

CVE-2019-2896

Vulnerability in the MICROS Relate CRM Software product of Oracle Retail Applications component: Internal Operations. Supported versions that are affected are 7.1.0, 15.0.0, 16.0.0, 17.0.0, and 18.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP...

CVE-2019-2896

CVE-2019-2896 affects Oracle MICROS Relate CRM Software, specifically the Internal Operations component. Affected versions are 7.1.0, 15.0.0, 16.0.0, 17.0.0, and 18.0.0. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, potentially leading to unauthorized access ...

Virtuozzo Linux Errata and Bugfix Advisory 2018:2896

Upstream security update. Follow RHBA-2018:2896 for details...

CVE-2018-2896

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi...

CVE-2018-2896

CVE-2018-2896 affects the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent Payments Core). Affected supported versions are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. The vulnerability is exploitable by an unauthenticated attacker with network access via HT...

[SECURITY] [DSA 4173-1] r-cran-readxl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4173-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 16, 2018 https://www.debian.org/security/faq -...

CVE-2017-2896

An exploitable out-of-bounds write vulnerability exists in the xlsmergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

CVE-2017-2896

CVE-2017-2896 affects libxls 1.4.x, where an exploitable out-of-bounds write in the xls_mergedCells function can cause memory corruption and remote code execution when processing a crafted XLS file. The cited sources describe an attacker sending malicious XLS data to trigger the vulnerability. Th...

irc.emcp.com XSS vulnerability

Vulnerable URL: http://irc.emcp.com/index.php?titleID=2896=1/-///'/"//--...

Ubuntu 14.04 LTS : Libgcrypt vulnerability (USN-2896-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2896-1 advisory. Daniel Genkin, Lev Pachmanov, Itamar Pipman and Eran Tromer discovered that Libgcrypt was susceptible to an attack via physical side channels. A local attacker...

CVE-2015-2896

The Up.time client for Windows (Idera Uptime Infrastructure Monitor) is affected by CVE-2015-2896. Up to version 7.6, an unauthenticated network attacker can send built-in commands to the Up.time port and obtain potentially sensitive information about the product version, underlying OS, running p...

Up.time agent for Windows contains multiple vulnerabilities

Overview The Up.time client for Windows is vulnerable to an format string attack as well as a buffer overflow, and may allow unauthenticated users to perform certain commands. Description CWE-134: Uncontrolled Format String - CVE-2015-2894For version 6.0 and 7.2, an unauthenticated attacker on th...

Oracle: Security Advisory (ELSA-2012-0302)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-1181)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...