109 matches found
Debian: Security Advisory (DSA-5122-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0423)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS : Apport vulnerability (USN-5122-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5122-1 advisory. It was discovered that Apport could be tricked into writing core files as root into arbitrary directories in certain scenarios. A local attacker could...
CVE-2013-5122
CVE-2013-5122 affects Cisco Linksys routers EA2700, EA3500, E4200, and EA4500. A bug allows an unsafe TCP port to open, enabling unauthenticated access to the device’s admin interface (notably via port 8083 in some reports). Several sources describe an authentication bypass that could grant contr...
CVE-2019-5122
SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with Parameter name in /objects/pluginSwitch.json.php...
CVE-2019-5122
YouPHPTube 7.6 exposes authenticated SQL injection vulnerabilities in /objects/pluginSwitch.json.php (parameters uuid, name, dir). The Talos report confirms exploitable injections that could exfiltrate information such as usernames and password hashes and, in some configs, access the underlying O...
ThreatList: Exploit Kits Still a Top Web-based Threat
What we can glean from a 2018 roundup of current web-threats is old vulnerabilities die hard. In a report, released by Palo Alto Networks Unit 42, researchers said so far this year cybercriminals are targeting unpatched PCs with ancient CVEs and well-known exploit kits. Here is a ThreatList from...
CVE-2018-5122
A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means was found of exploiting it, it could result in an out-of-bounds write. This vulnerability affects Firefox 58...
CVE-2018-5122
CVE-2018-5122 : A potential integer overflow in the WebCrypto DoCrypt function could lead to an out-of-bounds write. Affected product is Mozilla Firefox prior to version 58. This is documented across sources referencing Firefox WebCrypto vulnerability details and MFSA advisory context, confirming...
FreeBSD : palemoon -- multiple vulnerabilities (5044bd23-08cb-11e8-b08f-00012e582166)
Pale Moon reports : CVE-2018-5102: Use-after-free in HTML media elements CVE-2018-5122: Potential integer overflow in DoCrypt C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrin...
Ubuntu: Security Advisory (USN-3544-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox < 58 Multiple Vulnerabilities (macOS)
The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 58. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes. C Tenable Network Security, Inc. include'compat.inc'; if description...
UBUNTU-CVE-2018-5122
A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means was found of exploiting it, it could result in an out-of-bounds write. This vulnerability affects Firefox 58...
palemoon -- multiple vulnerabilities
Pale Moon reports: CVE-2018-5102: Use-after-free in HTML media elements CVE-2018-5122: Potential integer overflow in DoCrypt...
Fedora 27 : chromium (2017-109f8db088)
Update to 61.0.3163.100. Security fix for CVE-2017-5111, CVE-2017-5112, CVE-2017-5113, CVE-2017-5114, CVE-2017-5115, CVE-2017-5116, CVE-2017-5117, CVE-2017-5118, CVE-2017-5119, CVE-2017-5120, CVE-2017-5121, CVE-2017-5122 Note that Tenable Network Security has extracted the preceding description...
CVE-2017-5122
Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access via a crafted HTML page...
CVE-2017-5122
CVE-2017-5122 is an out-of-bounds memory access in Google Chrome/Chromium’s V8 engine prior to 61.0.3163.100 (Windows and Chromium) that could be triggered by a crafted HTML page, enabling remote code execution. Public notices from Debian, Arch Linux, Gentoo, Fedora, and others confirm the issue ...
