CVE-2016-5070

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext...

CVE-2016-5071

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root...

CVE-2016-5067

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection...

CVE-2016-5068

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for EmbeddedAceGetTask.cgi requests...

CVE-2016-5065

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow EmbeddedAceSetTask.cgi command injection...

Command injection

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow EmbeddedAceSetTask.cgi command injection...

CVE-2016-5067

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection...

CVE-2016-5067

CVE-2016-5067 concerns Sierra Wireless GX440 devices running ALEOS firmware 4.3.2, where a Hayes AT command injection vulnerability exists. The vulnerability enables a remote attacker to inject and execute arbitrary commands via AT command handling in the gateway device, per connected CNVD/NVD en...

Hardcoded credentials

Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641...

Security fix for the ALT Linux 8 package freeipa version 4.3.2-alt6

Jan. 23, 2017 Mikhail Efremov 4.3.2-alt6 - client: Require nss-utils closes: 33031. - Patches from upstream: + Fixed CVE-2016-7030. + Fixed CVE-2016-9575...

PT-2019-4673 · Puma +9 · Puma +10

Name of the Vulnerable Software and Affected Versions: Ruby versions prior to 2.4.8 Ruby versions 2.5.x through 2.5.6 Ruby versions 2.6.x through 2.6.4 Puma versions prior to 3.12.3 Puma versions prior to 4.3.2 Description: The issue is related to incorrect handling of special elements in the...

PT-2020-3715 · Ruby +2 · Puma +2

Name of the Vulnerable Software and Affected Versions: Puma versions prior to 4.3.2 Puma versions prior to 3.12.3 Description: The issue is related to HTTP Response Splitting, where an attacker can use newline characters CR, LF, or /r, /n to end a header and inject malicious content, such as...

Kibana 4.4.2, 4.3.3, 4.1.6 - Updated node.js versions due to upstream vulnerabilities

Same deal as last month, but we've bumped all 3 version to node v4.3.2 to cover security issues in node.js. You can read their maintenance announcement here: https://nodejs.org/en/blog/release/v4.3.2/ Check out the blog post with release notes or grab the latest version...

Kibana 4.4.1, 4.3.2, 4.1.5 - Updated node.js versions due to upstream vulnerabilities

Summary: The bundled versions of node.js in Kibana contain HTTP-related security vulnerabilities. Fixed versions of node.js were recently released. For the original node.js security announcement, see https://nodejs.org/en/blog/vulnerability/february-2016-security-releases/ Fixed versions: Kibana...

Fedora 21 : mod_wsgi-4.3.2-1.fc21 (2014-15586)

Update to new upstream version 4.3.2. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 20 : xen-4.3.2-6.fc20 (2014-7722)

Hypervisor heap contents leaked to guest, with extra patch to avoid regression Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Empire <= 4.3.2 (strncat) Denial of Service Exploit

No description provided by source. Empire = 4.3.2 strncat Denial of Service Exploit http://www.exploit-db.com/sploits/05132006-empiredos.zip milw0rm.com 2006-05-14...

iPhone4 FTP Server 1.0 - Empty CWD-RETR Remote Crash

No description provided by source. Exploit Title: iPhone4 FTP Server V1.0 - Empty CWD-RETR Remote Crash Date: 2011-05-30 Author: offsetIntruder Software Link: http://itunes.apple.com/us/app/ftp-server/id356055128?mt=8 Version: 1.0 Tested on: iPhone4 IOS 4.3.2 CVE: N/A import socket import sys...

CVE-2013-7061

Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API...

CVE-2013-7060

Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope...