SUSE: Security Advisory (SUSE-SU-2016:1601-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:1518-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-3622

CVE-2020-3622 refers to a vulnerability where a channel name string read from shared memory can be manipulated but not NULL-terminated, leading to potential memory corruption in Qualcomm Snapdragon components. Affected families include Snapdragon Auto/Compute/Connectivity, various Snapdragon SoCs...

CVE-2014-3622

creationtimestamp| type| source ---|---|--- 2020-02-19 16:52:08+00:00| seen| https://t.me/cibsecurity/9926...

CVE-2014-3622

Use-after-free vulnerability in the addpostvar function in the Posthandler component in PHP 5.6.x before 5.6.1 might allow remote attackers to execute arbitrary code by leveraging a third-party filter extension that accesses a certain ksep value...

CVE-2014-3622

CVE-2014-3622 describes a use-after-free in PHP 5.6.x prior to 5.6.1 affecting the Posthandler component (add_post_var). The underlying issue could let remote attackers execute arbitrary code through a third-party filter extension that accesses a specific ksep value. Practical impact is remote co...

Huawei EulerOS: Security Advisory for libtasn1 (EulerOS-SA-2017-1171)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtasn1 (EulerOS-SA-2017-1172)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3622

creationtimestamp| type| source ---|---|--- 2020-01-22 22:44:12+00:00| seen| https://t.me/cibsecurity/9366 2020-01-23 01:37:59+00:00| seen| https://t.me/cveNotify/388...

CVE-2011-3622

CVE-2011-3622 describes an XSS vulnerability in the admin login screen of the Phorum web forum software prior to version 5.2.18. The issue is documented across multiple sources (NVD) as a Cross-Site Scripting vulnerability, with impact details indicating user interaction may be required depending...

CVE-2019-3622

Files or Directories Accessible to External Parties in McAfee Data Loss Prevention DLPe for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to arbitrary locations via incorrect access control applied to the DLPe log folder allowing privileged users to create...

CVE-2019-3622

CVE-2019-3622 affects McAfee Data Loss Prevention Endpoint (DLPe) for Windows 11.x before 11.3.0. An incorrect access control on the DLPe log folder lets an authenticated user create symbolic links to redirect DLPe log files to arbitrary locations, enabling log file redirection by privileged user...

CVE-2019-3622 DLP Endpoint log file redirection to arbitrary locations

Files or Directories Accessible to External Parties in McAfee Data Loss Prevention DLPe for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to arbitrary locations via incorrect access control applied to the DLPe log folder allowing privileged users to create...

Solaris EXTREMEPARR dtappgather Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Solaris 'EXTREMEPARR' dtappgather Privilege Escalation", 'Description' = %q This module exploits a directory traversal vulnerability in the...

Solaris - 'EXTREMEPARR' dtappgather Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Solaris 'EXTREMEPARR' dtappgather Privilege Escalation", 'Description' = %q This module exploits a directory traversal vulnerability in the...

Security Bulletin: Vulnerabilities in libtasn1 affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in libtasn1 library. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-3622 DESCRIPTION: GNU Libtasn1 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the asn1extractderoctet...

Security Bulletin: IBM Security Access Manager appliances are affected by vulnerabilities in libtasn1 (CVE-2015-2806, CVE-2015-3622)

Summary IBM Security Access Manager has addressed these vulnerabilities, which affect the IBM Security Access Manager appliances. Vulnerability Details CVEID: CVE-2015-3622 DESCRIPTION: GNU Libtasn1 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the...

Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in libtasn1 (CVE-2015-3622, CVE-2015-2806)

Summary IBM QRadar Network Security has addressed vulnerabilities in libtasn1. Vulnerability Details CVEID: CVE-2015-3622 DESCRIPTION: GNU Libtasn1 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the asn1extractderoctet function. By sending an overly long...

Ubuntu 14.04 LTS / 16.04 LTS : Wayland vulnerability (USN-3622-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3622-1 advisory. It was discovered that the Wayland Xcursor support incorrectly handled certain files. An attacker could use these issues to cause Wayland to crash,...

EulerOS 2.0 SP2 : libtasn1 (EulerOS-SA-2017-1172)

According to the versions of the libtasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow flaw was found in the way the libtasn1 library decoded certain DER-encoded inputs. A specially crafted DER-encode...