Solaris 10 (sparc) : 138686-07

Portal Server 7.2 Solaris sparc: Maintenance Patch. Date this patch was last updated by Sun : Jan/27/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...

Stack overflow

In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the phpstreamurlwraphttpex function in ext/standard/httpfopenwrapper.c. This subsequently results in copying a large string...

Fedora 27 : php-phpmyadmin-motranslator / php-phpmyadmin-sql-parser / etc (2018-a1650ed14f)

From upstream announcement : Security fix: phpMyAdmin 4.7.8 is released Welcome to phpMyAdmin 4.7.8, a security releaes also containing regular maintenance bug fixes. The security fix relates to a self-XSS vulnerability in the central columns feature that is reported as PMASA-2018-1...

Code injection

An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions e.g., passthru, exec, shellexec, or system with a non-blocking STDIN stream, causing this...

CVE-2015-9253

An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions e.g., passthru, exec, shellexec, or system with a non-blocking STDIN stream, causing this...

CVE-2015-9253

CVE-2015-9253 affects PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and earlier than 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions (e.g., passthru, exec, shell_exec, system) with a non-blocking STDIN stream, causing the m...

CVE-2015-9253

An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions e.g., passthru, exec, shellexec, or system with a non-blocking STDIN stream, causing this...

CVE-2017-8957

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-8954

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-5804

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-5806

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-5790

A remote deserialization of untrusted data vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-5795

A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC version PLAT 7.2 E0403P06 was found...

CVE-2016-8525

A Remote Disclosure of Information vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version...

Remote code execution

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-5805

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-8957

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-5804

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-8955

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

Schneider Electric StruxureOn Gateway

CVSS v3 7.2 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: StruxureOn Gateway Vulnerability: Unrestricted Upload of File with Dangerous Type AFFECTED PRODUCTS Schneider Electric reports that the vulnerability affects the following versions of...