162 matches found
Amazon Linux AMI : rpm (ALAS-2021-1521)
The version of rpm installed on the remote host is prior to 4.11.3-40.79. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1521 advisory. A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can...
RHEL 8 : rpm (RHSA-2021:2574)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2574 advisory. The RPM Package Manager RPM is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and...
Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2021-1992)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : rpm (EulerOS-SA-2021-1992)
According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, a...
SUSE: Security Advisory (SUSE-SU-2015:0834-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3421
CVE-2021-3421 documents a flaw in the RPM package’s read functionality that can allow a caller to cause RPM database corruption by convincing a victim to install a seemingly verifiable package or by compromising an RPM repository. The highest reported impact is data integrity. The vulnerability a...
CVE-2021-3421 affecting package rpm 4.14.2-15
CVE-2021-3421 affecting package rpm 4.14.2-15. A patched version of the package is available...
Updated rpm packages fix security vulnerabilities
This update from 4.16.1.2 to 4.16.1.3 fixes bugs several bugs the RPM package manager, including several security issues: Fix arbitrary data copied from signature header past signature checking CVE-2021-3421 Fix signature check bypass with corrupted package CVE-2021-20271 Fix missing bounds check...
Fedora: Security Advisory for rpm (FEDORA-2021-8d52a8a999)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CentOS 8 : mod_auth_mellon (CESA-2019:3421)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3421 advisory. - modauthmellon: open redirect in logout url when using URLs with backslashes CVE-2019-3877 Note that Nessus has not tested for this issue but has instead relie...
CVE-2020-3421
The CVE-2020-3421 entry concerns Cisco IOS XE Software Zone-Based Firewall vulnerabilities. Affected component: Zone-Based Firewall handling of Layer 4 traffic on Cisco IOS XE. Root cause: incomplete handling of Layer 4 packets through the device, enabling an unauthenticated, remote attacker to c...
RHEL 7 : .NET Core 3.1 security and bugfix update for Red Hat Enterprise Linux (Important) (RHSA-2020:3421)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3421 advisory. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
CVE-2019-3421
The vulnerability CVE-2019-3421 affects the ZTE ZX297520V3 platform (7520V3V1.0.0B09P27 and earlier) and is described as a Command Injection that could let unauthorized users take control of the user terminal system. The CVEs and related records (NVD, Red Hat, prion listing) confirm affected prod...
Ubuntu 17.04 : libidn2-0 vulnerability (USN-3421-1)
It was discovered that Libidn2 incorrectly handled certain input. A remote attacker could possibly use this issue to cause Libidn2 to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisor...
CVE-2015-3421
CVE-2015-3421 affects the WordPress eShop plugin (
CVE-2017-3421
CVE-2017-3421 affects Oracle E-Business Suite, Oracle One-to-One Fulfillment component (User Interface). Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6. The vulnerability enables unauthenticated attackers with network access via HTTP to compromise Oracle One-to-One Fulf...
CVE-2016-3421
CVE-2016-3421 affects Oracle PeopleSoft Products, specifically the PeopleTools component (versions 8.53, 8.54, 8.55 ). The vulnerability resides in the Activity Guide subcomponent and, per the CNVD entry, can be exploited by a remote attacker to read, update, insert, or delete data, potentially l...
CVE-2016-3421
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Activity Guide...
CVE-2016-3421
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Activity Guide...
newlook.com XSS vulnerability
Vulnerable URL: http://www.newlook.com/fr/furniture/helpcentrefaq.jsp?pageName=404%22;alert/XSSPOSED/;// Details: Description| Value ---|--- Patched:| Yes, at 20.06.2016 Latest check for patch:| 20.06.2016 11:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 34...