65 matches found
EulerOS Virtualization 3.0.6.6 : libtar (EulerOS-SA-2021-1491)
According to the version of the libtar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow...
Security Bulletin: Multiple vulnerabilities in Db2 affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise
Summary IBM® Db2® shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise is vulnerable to information disclosure. Vulnerabilities have been identified in IBM Db2 and information about their fixes are published in a security bulletin. Vulnerability Details CVEID: CVE-2020-4387...
Security Bulletin: Multiple vulnerabilities in IBM DB2 affect IBM Operations Analytics Predictive Insights
Summary There are multiple vulnerabilities in IBM® DB2 used by IBM Operations Analytics Predictive Insights 1.3.6 and earlier. IBM Operations Analytics Predictive Insights has addressed the applicable CVEs CVE-2020-4386, CVE-2020-4355, CVE-2020-4420,CVE-2020-4414, CVE-2020-4363, CVE-2020-4387...
CVE-2013-4420 affecting package libtar 1.2.20-11
CVE-2013-4420 affecting package libtar 1.2.20-11. A patched version of the package is available...
IBM DB2 9.7 < FP11 40162 / 10.1 < FP6 40161 / 10.5 < FP11 40160 / 11.1 < FP5 40159 / 11.5 < Mod 4 FP0 Multiple Vulnerabilities (Windows)
According to its version, the installation of IBM DB2 running on the remote host is either 9.7 prior to Fix Pack 11 Special Build 40162, 10.1 prior to Fix Pack 6 Special Build 40161, 10.5 prior to Fix Pack 11 Special Build 40160, or 11.1 prior to Fix Pack 5 Special Build 40159, 11.5 prior to Mod ...
Ubuntu 18.04 LTS / 20.04 LTS : Cinder and os-brick vulnerability (USN-4420-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4420-1 advisory. David Hill and Eric Harney discovered that Cinder and os-brick incorrectly handled ScaleIO backend credentials. An attacker could possibly use this...
CVE-2020-4420
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate command. IBM X-Force ID: 180076...
CVE-2020-4420
CVE-2020-4420 affects IBM DB2 for Linux, UNIX and Windows (including DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5. An unauthenticated attacker could cause a denial of service via a hang in the execution of a terminate command. CVSS v3.0 base score 7.5 (network, high availability impact). R...
Huawei EulerOS: Security Advisory for libtar (EulerOS-SA-2019-2444)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-4420
creationtimestamp| type| source ---|---|--- 2019-12-27 00:55:10+00:00| seen| https://t.me/cibsecurity/8863 2024-03-17 10:46:45+00:00| seen| https://t.me/ctinow/209856...
CVE-2012-4420
CVE-2012-4420 affects the JVM implementation of Java SE 7 provided by OpenJDK 7, where integer arrays could be incorrectly initialized after memory allocation, allowing a remote attacker to disclose potentially sensitive information. The connected sources confirm this information disclosure in th...
WordPress SlickQuiz 1.3.7.1 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications 1. ADVISORY INFORMATION ======================= Product: SlickQuiz Vendor URL: https://wordpress.org/plugins/slickquiz/ Type: Cross-Site Scripting CWE-79 Date found: 2019-05-30 Date published: 2019-09-10 CVSSv3 Score: 6.1...
WordPress SlickQuiz 1.3.7.1 SQL Injection
RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: SlickQuiz Vendor URL: https://wordpress.org/plugins/slickquiz/ Type: SQL Injection CWE-74 Date found: 2019-05-30 Date published: 2019-09-10 CVSSv3 Score: 8.1...
CVE-2019-4420
IBM Intelligent Operations Center (IOC) is affected from V5.1.0 through V5.2.0 by a vulnerability that could disclose detailed error messages containing sensitive information. The issue is documented as CVE-2019-4420 with a CVSS v3.1 base score of 6.2 (local, low attack complexity, no authenticat...
Security Bulletin: IBM® Intelligent Operations Center might disclose sensitive information in error messages (CVE-2019-4420)
Summary IBM® Intelligent Operations Center might generate detailed error messages that include sensitive information and so might aid attacks on the system. Vulnerability Details CVEID: CVE-2019-4420 DESCRIPTION: IBM Intelligent Operations Center IOC could disclose detailed error messages,...
CVE-2018-4420
CVE-2018-4420 describes a memory corruption issue resolved by removing the vulnerable code. The vulnerability affected Apple platforms up to the listed patches and versions: iOS
Debian DSA-4420-1 : thunderbird - security update
Multiple security issues have been found in the Thunderbird mail client, which could lead to the execution of arbitrary code or denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4420. The tex...
Apple TV < 12.1 Multiple Vulnerabilities
According to its banner, the version of Apple TV on the remote device is prior to 12.1. It is, therefore, affected by multiple vulnerabilities as described in the HT209194 security advisory. Note that only 4th generation devices are affected by these vulnerabilities. C Tenable Network Security,...
