107 matches found
FreakOut Botnet Turns DVRs Into Monero Cryptominers
Threat group FreakOut’s Necro botnet has developed a new trick: infecting Visual Tools DVRs with a Monero miner. Juniper Threat Labs researchers have issued a report detailing new activities from FreakOut, also known as Necro Python and Python.IRCBot. In late September, the team noticed that the...
CVE-2009-2900
CVE-2009-2900 entry is rejected/not used; it does not represent an active vulnerability entry.
SUSE: Security Advisory (SUSE-SU-2019:2900-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2020:2900-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-2900
CVE-2020-2900 affects Oracle GraalVM Enterprise Edition (Tools component) in versions 19.3.1 and 20.0.0. The vulnerability allows a low-privilege attacker with network access to read and modify data, with unauthorized updates, inserts, or deletes and partial confidentiality/integrity impacts. Exp...
CVE-2019-2900
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...
CVE-2019-2900
CVE-2019-2900 affects Oracle BI Enterprise Edition (Oracle Fusion Middleware Analytics Actions). Affected versions are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise BI EE, potentially leading to unauthorized access to c...
RHEL 7 : kernel (RHSA-2019:2900)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2900 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A buffer overflow flaw was found in th...
Oracle Business Intelligence Publisher Multiple Vulnerabilities (July 2018 CPU)
The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.180717 or 11.1.1.9.x prior to 11.1.1.9.180717, similarly, versions 12.2.1.2.x prior to 12.2.1.2.180717 and 12.2.1.3.x prior to 12.2.1.3.180717 are affected as noted in the July 2018...
CVE-2018-2900
CVE-2018-2900 affects Oracle BI Publisher (Layout Tools) within Oracle Fusion Middleware. Affected: BI Publisher component, 11.1.1.7.x prior to 11.1.1.7.180717 or 11.1.1.9.x prior to 11.1.1.9.180717 (and related versions per the July 2018 CPU advisory). Affected configuration allows unauthenticat...
Debian DSA-4248-1 : blender - security update
Multiple vulnerabilities have been discovered in various parsers of Blender, a 3D modeller/ renderer. Malformed .blend model files and malformed multimedia files AVI, BMP, HDR, CIN, IRIS, PNG, TIFF may result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive tex...
Debian: Security Advisory (DSA-4248-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-2900
An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.png' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...
Ubuntu 14.04 LTS : GNU C Library vulnerability (USN-2900-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2900-1 advisory. It was discovered that the GNU C Library incorrectly handled receiving responses while performing DNS resolution. A remote attacker could use this issue to cause...
MEDCIN engine of the exploitability of the vulnerability details-vulnerability warning-the black bar safety net
! Science: the MEDCIN engine is a service to doctors and nurses electronic medical records system. A few months ago, I was in the MEDCIN engine to older versions of the safety assessment found a loophole. So I to the Supplier a report of the vulnerabilities and then repair, after viewing the...
CVE-2015-2900
Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 is affected by CVE-2015-2900 via the AddUserFinding add_userfinding2 function. A crafted packet sent to port 8190 can trigger an out-of-bounds write, potentially causing a denial of service and possibly other unspecified impacts. The CVE e...
Medicomp MEDCIN Engine contains multiple vulnerabilities
Overview Medicomp's MEDCIN Engine provide electronic health records EHR tools and information to medical professionals. MEDCIN Engine versions before version 2.22.20153.226 are vulnerable to several buffer overflows. Description Medicomp MEDCIN Engine prior to version 2.22.20153.226 is vulnerable...
Code injection
The Network-Based Application Recognition NBAR protocol implementation in Cisco IOS 15.3100M and earlier on Cisco 2900 Integrated Services Router aka Cisco Internet Router devices allows remote attackers to cause a denial of service NBAR process hang via IPv4 packets, aka Bug ID CSCuo73682...
CVE-2015-0586
The CVE-2015-0586 entry concerns Cisco’s NBAR (Network-Based Application Recognition) on Cisco IOS 15.3(100)M and earlier running on Cisco 2900 Series ISRs. The vulnerability allows remote attackers to cause a denial of service by sending IPv4 packets that hang the NBAR process. Cisco’s advisory ...