CVE-2023-6309

A vulnerability, which was classified as critical, was found in moses-smt mosesdecoder up to 4.0. This affects an unknown part of the file contrib/iSenWeb/transresult.php. The manipulation of the argument input1 leads to os command injection. The exploit has been disclosed to the public and may b...

CVE-2023-6309

CVE-2023-6309 affects moses-smt mosesdecoder up to version 4.0. The vulnerability is in the file contrib/iSenWeb/trans_result.php, where manipulating the input1 argument leads to an OS command injection. The exploit has been disclosed publicly.

Ubuntu 16.04 ESM : Linux kernel vulnerabilities (USN-6309-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6309-1 advisory. Zheng Zhang discovered that the device-mapper implementation in the Linux kernel did not properly handle locking during tableclear operations. A local...

SAP NetWeaver AS Java DoS (2941315)

The version of SAP NetWeaver AS Java detected on the remote host may be affected by a denial of service DoS vulnerability, as referenced in SAP Security Note 2941315. SAP NetWeaver AS JAVA does not perform any authentication checks for a web service allowing the attacker to send several payloads...

CVE-2020-6309

SAP NetWeaver AS JAVA, versions - ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11, does not perform any authentication checks for a web service allowing the attacker to send several payloads and leading to complete denial of service...

CVE-2020-6309

SAP NetWeaver AS JAVA (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11) is affected by CVE-2020-6309, where a web service fails to perform authentication checks, enabling an attacker to send multiple payloads and cause a denial of service. Impact is a network‑b...

Huawei Data Communication: Sixteen OpenSSL Vulnerabilities on Some Huawei products (huawei-sa-20170322-01-openssl)

Statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2012-6309

creationtimestamp| type| source ---|---|--- 2020-02-06 20:35:29+00:00| seen| https://t.me/cibsecurity/9674...

CVE-2012-6309

CVE-2012-6309 affects Arctic Torrent 1.4. A vulnerability in .torrent file handling could allow a remote attacker to cause a Denial of Service. Documents specify unspecified vectors and do not provide concrete exploit details. CVSS metrics indicate a network-accessible issue with low initial comp...

Security Bulletin: Vulnerabilities in OpenSSL affect Tivoli Storage FlashCopy Manager VMware (CVE-2016-6303, CVE-2016-2182, CVE-2016-2177, CVE-2016-2183, CVE-2016-6309, CVE-2016-7052, CVE-2016-2178, CVE-2016-6306)

Summary OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL used by Tivoli Storage FlashCopy Manager IBM Spectrum Protect Snapshot VMware has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-6303 DESCRIPTION: OpenSSL is vulnerabl...

Security Bulletin: Vulnerabilities in OpenSSL affect Tivoli Storage FlashCopy Manager Unix (CVE-2016-6303, CVE-2016-2182, CVE-2016-2177, CVE-2016-2183, CVE-2016-6309, CVE-2016-7052, CVE-2016-2178, CVE-2016-6306)

Summary OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL used by Tivoli Storage FlashCopy Manager IBM Spectrum Protect Snapshot Unix has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-6303 DESCRIPTION: OpenSSL is vulnerable ...

CVE-2014-6309

CVE-2014-6309 affects Kaazing Gateway server components. In Kaazing Gateway 4.0.2, 4.0.3, 4.0.4 and Gateway – JMS Edition 4.0.2, 4.0.3, 4.0.4, the HTTP and WebSocket engine can allow remote attackers to obtain sensitive information via vectors related to HTTP request handling. The vulnerability i...

Fedora Update for tnef FEDORA-2017-2b28a055f2

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for tnef FEDORA-2017-c2882ae75b

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 839-2] tnef regression update

Package : tnef Version : 1.4.9-1+deb7u2 CVE ID : CVE-2017-6307 CVE-2017-6308 CVE-2017-6309 CVE-2017-6310 Debian Bug : 857342 While fixing the above mentioned CVEs, upstream introduced a regression. The new patches added for this upload take care of that. For Debian 7 "Wheezy", these problems have...

[SECURITY] [DSA 3798-1] tnef security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3798-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 839-1] tnef security update

Package : tnef Version : 1.4.9-1+deb7u1 CVE ID : CVE-2017-6307 CVE-2017-6308 CVE-2017-6309 CVE-2017-6310 CVE-2017-6307 An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapiattr.c:mapiattrread. These might lead to invalid read and write operations, controll...

CVE-2017-6309

An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parsefile function. These might lead to invalid read and write operations, controlled by an attacker...

CVE-2017-6309

CVE-2017-6309 affects the tnef package (before 1.4.13). The issue is one of several defects described in Mageia and other advisories: two type confusions in parse_file() may lead to invalid read/write operations under attacker-controlled input. This is part of a cluster of memory/safety issues in...

CVE-2017-6309

An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parsefile function. These might lead to invalid read and write operations, controlled by an attacker...