247 matches found
Fedora 33 : python3.9 (2021-faf88b9499)
The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-faf88b9499 advisory. - Python 3.x through 3.9.1 has a buffer overflow in PyCArgrepr in ctypes/callproc.c, which may lead to remote code execution in certain Python...
Fedora: Security Advisory for python3.8 (FEDORA-2021-cc3ff94cfc)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Internet Bug Bounty: Buffer overflow in PyCArg_repr in _ctypes/callproc.c for Python 3.x to 3.9.1
TL;DR Description Python 3.x through 3.9.1 has a buffer overflow in PyCArgrepr in ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to cdouble.fromparam. This occurs...
CVE-2021-3177
CVE-2021-3177: A buffer overflow in PyCArg_repr of Python’s ctypes (_ctypes/callproc.c) may allow remote code execution when untrusted floating-point input is passed (e.g., 1e300 to c_double.from_param) due to unsafe use of sprintf. Affected: Python 3.x up to 3.9.1. Remediation exists in multiple...
CVE-2021-3177
Removed by vendor...
CVE-2020-3177
A vulnerability in the Tool for Auto-Registered Phones Support TAPS of Cisco Unified Communications Manager UCM and Cisco Unified Communications Manager Session Management Edition SME could allow an unauthenticated, remote attacker to conduct directory traversal attacks on an affected device. The...
CVE-2020-3177
Cisco UCS CUCM and SME TAPS path traversal (CVE-2020-3177) is due to insufficient validation of input to the TAPS interface, enabling an unauthenticated attacker to trigger directory traversal and read arbitrary files. Affected components include the Tool for Auto-Registered Phones Support (TAPS)...
CVE-2018-3177
CVE-2018-3177 affects Oracle Hyperion, specifically the Hyperion Common Events component (User Interface) in version 11.1.2.4. The vulnerability is exploitable by an unauthenticated attacker with network access via HTTP, with user interaction required. Impact includes unauthorized update/insert/d...
CVE-2018-3177
Vulnerability in the Hyperion Common Events component of Oracle Hyperion subcomponent: User Interface. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Common Events. Successful...
CVE-2017-3177
CVE-2017-3177 entry is rejected and not active per the Initial Description.
CVE-2011-3177
Summary: CVE-2011-3177 concerns YaST2 network creating files with world-readable permissions, allowing local users to read sensitive network config data (e.g., wireless passwords). Affected components: YaST2 network handling; YaST2 network configuration files. Root cause (as documented): Files cr...
CVE-2016-3177
Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors...
CVE-2016-3177
Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors...
CVE-2016-3177
CVE-2016-3177 concerns GIFLIB 5.1.2 and affects the gifcolor.c component, with multiple use-after-free and double-free vulnerabilities described as having unspecified impact and attack vectors. The provided documents do not specify affected product variants beyond GIFLIB 5.1.2, nor provide remedi...
Moodle 2.8.x < 2.8.6 Multiple Vulnerabilities
Binary data 9425.prm...
Fedora 22 : moodle-2.8.7-1.fc22 (2015-14988)
moodle-2.8.7-1.fc22 - Latest upstream release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 21 : moodle-2.7.9-1.fc21 (2015-14996)
moodle-2.7.9-1.fc21 - 2.7.9. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
CVE-2015-3177
The CVE-2015-3177 entry affects Moodle 2.8.x prior to 2.8.6. The vulnerability arises because Moodle does not properly enforce the tool/monitor:subscribe capability before entering subscriptions to site-wide event-monitor rules, enabling remote authenticated users to obtain sensitive information ...