82 matches found
Ubuntu: Security Advisory (USN-338-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-4031
creationtimestamp| type| source ---|---|--- 2022-03-18 21:28:57+00:00| seen| https://t.me/cibsecurity/39247...
CVE-2021-4031
Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...
CVE-2021-4031
CVE-2021-4031 affects the Syltek application prior to version 10.22.00. The root cause is insufficient verification of a product’s payment data, allowing a forged request to mark items as paid without proper authentication. Impact is payment system bypass with high integrity-risk (CVE metrics: CV...
CVE-2021-4031 Syltek Insufficient Verification of Data Authenticity
Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...
RHEL 7 : freerdp (RHSA-2020:4031)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4031 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...
Fedora 31 : 2:freerdp (2020-a3432485db)
Bugfix and CVE release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...
Fedora 32 : 2:freerdp (2020-8d5f86e29a)
Bugfix and CVE release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...
[ASA-202006-15] freerdp: multiple issues
Arch Linux Security Advisory ASA-202006-15 ========================================== Severity: High Date : 2020-06-28 CVE-ID : CVE-2020-4030 CVE-2020-4031 CVE-2020-4032 CVE-2020-4033 CVE-2020-11095 CVE-2020-11096 CVE-2020-11097 CVE-2020-11098 CVE-2020-11099 Package : freerdp Type : multiple issu...
Security fix for the ALT Linux 9 package freerdp version 2.1.2-alt1
2.1.2-alt1 built June 25, 2020 Andrey Cherepanov in task 253866 June 23, 2020 Andrey Cherepanov - New version. - Fixes: + CVE-2020-4033 Out of bound read in RLEDECOMPRESS + CVE-2020-4031 Use-After-Free in gdiSelectObject + CVE-2020-4032 Integer casting vulnerability in updaterecvsecondaryorder +...
CVE-2020-4031
CVE-2020-4031 affects FreeRDP prior to 2.1.2, with a use-after-free in the gdi_SelectObject path. All FreeRDP clients operating in compatibility mode using /relax-order-checks are exposed. The issue is mitigated by upgrading to FreeRDP 2.1.2 or later, which contains the fix. The available documen...
CVE-2020-4031 Use-After-Free in gdi_SelectObject in FreeRDP
In FreeRDP before version 2.1.2, there is a use-after-free in gdiSelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2...
CVE-2018-4031
An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without...
CVE-2018-4031
CVE-2018-4031 affects CUJO Smart Firewall firmware 7003. The safe-browsing component abuses Lunatik (kernel Lua) by injecting unsanitized Host header data into a Lua statement, enabling arbitrary code execution in the kernel. Exploitation can occur via crafted HTTP/HTTPS requests containing a mal...
CVE-2018-4031
An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without...
CVE-2019-4031
CVE-2019-4031 affects IBM Workload Scheduler Distributed (Tivoli Workload Scheduler) across 9.2.0 FP03 and earlier, 9.3.0 FP03 and earlier, 9.4.0 FP05 and earlier, up to 9.5.0 GA. A local attacker can exploit a flaw in the taskLauncher-related path to create or replace files owned by root, enabli...
Security Bulletin: Vulnerability CVE-2019-4031 affects IBM Workload Scheduler
Summary Vulnerability CVE-2019-4031 affects IBM Workload Scheduler because a local user could launch taskLauncher program and create or replace files created by root user escalating privileges. Vulnerability Details CVEID: CVE-2019-4031 DESCRIPTION: IBM Tivoli Workload Scheduler contains a...
Ubuntu: Security Advisory (USN-4031-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-4031
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wangkongbaotraversal.rb 2025-02-06 03:13:40+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:06+00:00| seen...