[SECURITY] Fedora 34 Update: xterm-370-3.fc34

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

Mageia: Security Advisory (MGASA-2014-0273)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2015-0077)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0337)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0336)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 33 Update: xterm-366-1.fc33

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

CVE-2020-4014

The CVE-2020-4014 vulnerability affects Atlassian Fisheye and Crucible before version 4.8.1. The issue resides in the /profile/deleteWatch.do resource, where improper authorization allows remote attackers to remove another user’s repository watching settings. Impact is limited to unauthorized mod...

Improper authorization vulnerablity in the /profile/deleteWatch.do resource- CVE-2020-4014

The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to remove another user's watching settings for a repository via an improper authorization vulnerability...

Improper authorization vulnerablity in the /profile/deleteWatch.do resource- CVE-2020-4014

The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to remove another user's watching settings for a repository via an improper authorization vulnerability...

Improper authorization vulnerablity in the /profile/deleteWatch.do resource- CVE-2020-4014

The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to remove another user's watching settings for a repository via an improper authorization vulnerability...

Security Bulletin: IBM® Db2® is vulnerable to a buffer overflow which could allow a local malicious user to execute arbitrary code (CVE-2019-4014).

Summary Db2 is vulnerable to a buffer overflow which could allow a local malicious user to execute arbitrary code as root. Vulnerability Details CVEID: CVE-2019-4014 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server is vulnerable to a buffer overflow, which could allow ...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1471)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security vulnerabilities have been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2018-1936,CVE-2019-4014)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-1936 DESCRIPTION: IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable ...

Ubuntu 16.04 LTS / 18.04 LTS : GLib vulnerability (USN-4014-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4014-1 advisory. It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information. Tenable has...

CVE-2018-4014

The CVE-2018-4014 entry is supported by concrete details from Talos and Red Hat/NVD sources. It describes an exploitable stack-based buffer overflow in the Roav A1 Dashcam wifi command 9999 (WiFiCmd 9999) that can lead to code execution when processing a user-controlled string via an HTTP-like in...

CVE-2018-4014

An exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam running version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise (CVE-2018-1936, CVE-2019-4014)

Summary IBM DB2 is shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise formerly IBM IoT Predictive Maintenance and Optimization. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. CVE-2018-1936, CVE-2019-4014 Vulnerability...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with Predictive Maintenance and Quality (CVE-2018-1936, CVE-2019-4014)

Summary IBM DB2 is shipped with Predictive Maintenance and Quality. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. CVE-2018-1936, CVE-2019-4014 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

CVE-2019-4014

CVE-2019-4014 affects IBM DB2 for Linux, UNIX and Windows (including DB2 Connect Server) across 9.7, 10.1, 10.5 and 11.1. Description: a buffer overflow could allow an authenticated local attacker to execute arbitrary code on the system as root. Impact: local code execution with root privileges. ...

Debian DSA-4014-1 : thunderbird - security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4014. The...