14091 matches found
RHEL 6 / 7 : httpd24-httpd (RHSA-2020:3733)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3733 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Push diary crash on...
RHEL 6 / 7 : rh-mariadb102-mariadb and rh-mariadb102-galera (RHSA-2020:4174)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4174 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The...
Sql injection
Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php...
CVE-2022-47740: Improper Neutralization of Special Elements used in an SQL Command
Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php...
AZL-47713 CVE-2021-36647 affecting package hvloader for versions less than 1.0.1-6
Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexpmod in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information typically an untrusted operating system attacking a...
SUSE: Security Advisory (SUSE-SU-2023:0084-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Speech to Text, Text to Speech ICP, WebSphere Application Server Liberty Fix
Summary An information disclosure in WebSphere Application Server - Liberty Medium CVE-2020-4329 has been fixed in WebSphere Application Server Liberty 20.0.0.5, included in ICP WatsonTexttoSpeech and Speech to Text v1.1.2 GA: 6/19/20. Vulnerability Details CVEID:CVE-2020-4329 DESCRIPTION: IBM...
SAUTER Controls Nova 200 - 220 Series (PLC 6)
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: SAUTER Controls Equipment: Nova 200–220 Series PLC 6 Vulnerabilities: Missing Authentication for Critical Function, Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful...
Ubuntu: Security Advisory (USN-5798-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5798-1: .NET 6 vulnerability
Johan Gorter discovered that .NET 6 incorrectly processed certain invalid HTTP requests. An attacker could possibly use this issue to cause a denial of service condition for an exposed endpoint...
This Week in Spring - January 9th, 2023
Hi, Spring fans! As I write this Im on a plane winging my way to Helsinki, Finland. A new year and new journeys begin. Its going to be cold there. Wish me luck! Do you know what always warms me up? The thrill of learning. And this weeks no different. This week weve got some good stuff line up so...
Debian: Security Advisory (DLA-3263-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-3263 : libtasn1-6 - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3263 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3263-1 [email protected] https://www.debian.org/lts/security/...
Asus RT-AX82U cfg_server cm_processREQ_NC information disclosure vulnerability
Talos Vulnerability Report TALOS-2022-1590 Asus RT-AX82U cfgserver cmprocessREQNC information disclosure vulnerability January 10, 2023 CVE Number CVE-2022-38105 SUMMARY An information disclosure vulnerability exists in the cmprocessREQNC opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router’s...
Ubuntu 22.04 LTS : .NET 6 vulnerability (USN-5798-1)
The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5798-1 advisory. Johan Gorter discovered that .NET 6 incorrectly processed certain invalid HTTP requests. An attacker could possibly use this issue to cause a denial of service...
[SECURITY] [DLA 3263-1] libtasn1-6 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3263-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 09, 2023 https://wiki.debian.org/LTS -...
DLA-3263-1 libtasn1-6 - security update
Bulletin has no description...
chambres-lacabriole.com Cross Site Scripting vulnerability OBB-3130305
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
January 6 Report: 11 Details You May Have Missed
The January 6 Committee’s 841-page report will go down as one of the most important documents in US history. These key details stand out...
orion10.ru Cross Site Scripting vulnerability OBB-3129942
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...