114 matches found
CVE-2020-3845
CVE-2020-3845 is a memory corruption issue in the Intel Graphics Driver component of macOS Catalina/macOS releases. The Apple HT210919 advisory confirms the vulnerability and lists mitigation: update to macOS Catalina 10.15.3 (Security Update 2020-001). Affected: Intel Graphics Driver on macOS Ca...
Important: Red Hat Security Advisory: Red Hat Satellite Tools security update
An update is now available for Satellite Tools 6.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
RHEL 5 / 6 / 7 / 8 : Red Hat Satellite Tools (RHSA-2019:1223)
The remote Redhat Enterprise Linux 5 / 6 / 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1223 advisory. Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and...
CVE-2019-3845
A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1. A malicious user authenticated to a host registered to Satellite or Capsule can use this fla...
CVE-2019-3845
CVE-2019-3845 affects Red Hat Satellite tools (qpid-dispatch-router). The root cause is exposed QMF methods via qdrouterd, enabling an attacker authenticated on a registered host to access QMF methods across registered hosts and execute privileged commands. Red Hat issued RHSA-2019:1223 to addres...
RHEL 7 : katello-installer-base (RHSA-2019:0735)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:0735 advisory. The qpid-dispatch-router package provides remote host management functionality and is configured through the katello-installer-base package. Addition...
RHEL 7 : katello-installer-base (RHSA-2019:0733)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0733 advisory. The qpid-dispatch-router package provides remote host management functionality and is configured through the katello-installer-base package. Addition...
RHEL 6 / 7 : katello-installer-base (RHSA-2019:0734)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0734 advisory. The qpid-dispatch-router package provides remote host management functionality and is configured through the katello-installer-base package...
Important: Red Hat Security Advisory: katello-installer-base security and enhancement update
An update for katello-installer-base which configures qpid-dispatch-router is now available for Red Hat Satellite 6.2 for RHEL 6 and Red Hat Satellite 6.2 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVS...
Important: Red Hat Security Advisory: katello-installer-base security and enhancement update
An update for katello-installer-base which configures qpid-dispatch-router is now available for Red Hat Satellite 6.4 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Important: Red Hat Security Advisory: katello-installer-base security and enhancement update
An update for katello-installer-base which configures qpid-dispatch-router is now available for Red Hat Satellite 6.3 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Hyland Perceptive Document Filters OpenDocument to JPEG conversion SkCanvas Code Execution vulnerability(CVE-2018-3845)
Summary An exploitable double free exists in the OpenDocument to JPEG conversion functionality of the Hyland Perspective Document Filters version 11.4.0.2647. A crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution. Tested Versions Perceptive...
CVE-2018-3845
CVE-2018-3845 affects Hyland Perceptive Document Filters 11.4.0.2647 (x86/x64 Windows/Linux) and related builds, in the OpenDocument to JPEG conversion path. The root cause is a double release/double free of a SkCanvas object during the conversion process, caused by a faulty lifecycle/destruction...
CVE-2010-3845
libapache-authenhook-perl 2.00-04 stores usernames and passwords in plaintext in the vhost error log...
CVE-2010-3845
libapache-authenhook-perl 2.00-04 stores usernames and passwords in plaintext in the vhost error log...
CVE-2010-3845
CVE-2010-3845 affects libapache-authenhook-perl, version 2.00-04. The flaw is that it stores usernames and passwords in plaintext in the vhost error log, exposing sensitive credentials. The connected sources (CNVD, NVD, OSV, Debian/CVE trackers, and national advisories) corroborate text日志 exposur...
CVE-2010-3845
libapache-authenhook-perl 2.00-04 stores usernames and passwords in plaintext in the vhost error log...
Debian DSA-3845-1 : libtirpc - security update
Guido Vranken discovered that incorrect memory management in libtirpc, a transport-independent RPC library used by rpcbind and other programs may result in denial of service via memory exhaustion depending on memory management settings. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2017-3845
CVE-2017-3845 concerns a cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance. Affected: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 (11.5(0) affected); earlier than 11.0 not vulnerable. Root cause: in...
