CVE-2024-35176 affecting package rubygem-rexml for versions less than 3.2.7-1

CVE-2024-35176 affecting package rubygem-rexml for versions less than 3.2.7-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-35176 affecting package ruby for versions less than 3.1.4-6

CVE-2024-35176 affecting package ruby for versions less than 3.1.4-6. A patched version of the package is available...

CVE-2024-35176

REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this...

CVE-2024-35176 affecting package rubygem-rexml for versions less than 3.2.8-1

CVE-2024-35176 affecting package rubygem-rexml for versions less than 3.2.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-35176 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rexml, logstash-output-opensearch, jruby, ruby...

CVE-2024-35176 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby, jruby, logstash-output-opensearch, ruby3.2-rexml...

CVE-2024-35176 REXML contains a denial of service vulnerability

REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this...

CVE-2024-35176 REXML contains a denial of service vulnerability

REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this...

CVE-2024-35176

REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this...

HP LaserJet Printers DoS (HPSBPI03852)

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device. Note that Nessus has not tested for this issue but has instead relied only on the application's...

CVE-2023-35176

creationtimestamp| type| source ---|---|--- 2023-06-30 20:15:25+00:00| seen| https://t.me/cibsecurity/65808...

CVE-2023-35176

CVE-2023-35176 affects certain HP LaserJet Pro printers. The vulnerability is described as a buffer overflow and/or denial of service when using the backup & restore feature via the device’s embedded web service. The issue is evidenced by HP’s advisory HPSBPI03852 and related firmware‑update noti...

FreeBSD : www/awstats -- Partial absolute pathname (bba3f684-9b1d-11ed-9a3f-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bba3f684-9b1d-11ed-9a3f-b42e991fc52e advisory. - In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname omitting the...

USN-4953-1 awstats vulnerabilities

Sean Boran discovered that AWStats incorrectly filtered certain parameters. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2020-29600 It was discovered that AWStats incorrectly filtered certain parameters. A remote attacker could possibly use this issue to access...

Fedora 33 : awstats (2020-4cba5f2846)

Security fix for CVE-2020-35176 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora: Security Advisory for awstats (FEDORA-2020-4cba5f2846)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-35176

creationtimestamp| type| source ---|---|--- 2020-12-12 02:35:52+00:00| seen| https://t.me/cibsecurity/20651 2020-12-12 02:38:53+00:00| seen| https://t.me/cibsecurity/20671 2020-12-12 03:25:20+00:00| seen| https://t.me/cibsecurity/20691 2020-12-12 04:07:07+00:00| seen| https://t.me/cibsecurity/207...

CVE-2020-35176

AWStats vulnerability CVE-2020-35176 affects AWStats up to version 7.8, where cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting /etc), enabling directory traversal and potential filesystem access. Root cause cited as an incomplete fix for CVE-2017-1000501 and CVE-2020-29600...

CVE-2020-35176

In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname omitting the initial /etc, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600...