Red Hat Enterprise Linux SEoL (7.8.x <= x <= 7.9.x)

According to its version, Red Hat Enterprise Linux is between 7.8.x and 7.9.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilitie...

pki-core security update

10.5.18-32 - - RHEL 7.9 Async Security Update CY24Q2.4: - - Updated nspr-devel and nss-devel build requirements as well as nss and nss-tools runtime requirements mharmsen - Updated jss dependencies mharmsen - Added git build dependency mharmsen - Additional trivial fix jmagne - RHEL-9917 -...

CVE-2024-1168

The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's social image URL in all versions up to, and including, 7.9 due to insufficient input sanitization and output escaping on user supplied image URLs. This makes it possible for authenticated...

Missing character encoding in progress display allows for spoofing of scp client output (CVE-2019-6109)

An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or Man-in-The-Middle attacker can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This...

CVE-2024-23613

A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...

PT-2024-19968 · Symantec · Symantec Deployment Solution

Name of the Vulnerable Software and Affected Versions: Symantec Deployment Solution version 7.9 Description: A buffer overflow vulnerability exists when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this issue to achieve remote code execution as SYSTEM. Recommendations:...

CVE-2023-6562

JPX Fragment List flst box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachable by a server if the server allows the attacker to upload a specially-crafted the image that is displayed back to the attacker...

Design/Logic Flaw

JPX Fragment List flst box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachable by a server if the server allows the attacker to upload a specially-crafted the image that is displayed back to the attacker...

CVE-2023-6562

Kakadu 7.9 is affected by a JPX Fragment List (flst) box vulnerability that enables an attacker to exfiltrate local and remote files reachable by a server when the server accepts and displays a specially crafted image uploaded by the attacker. Connections across sources confirm the issue is tied ...

Siemens SCALANCE X-200RNA Switch Devices Improper Encoding or Escaping of Output (CVE-2019-6109)

An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or Man-in-The- Middle attacker can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This...

Siemens SCALANCE X-200RNA Switch Devices Inappropriate Encoding For Output Context (CVE-2019-6110)

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server or Man-in- The-Middle attacker can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred. - In OpenSSH 7.9, due to accepting and...

K12252011: OpenSSH vulnerability CVE-2019-6109

Security Advisory Description An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or Man-in-The-Middle attacker can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional...

SUSE CVE-2019-6110

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server or Man-in-The-Middle attacker can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred...

CVE-2023-23692

Dell EMC prior to version DDOS 7.9 contains an OS command injection Vulnerability. An authenticated non admin attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable...

CVE-2023-23692

CVE-2023-23692 affects Dell PowerProtect Data Domain (DDOS) prior to version 7.9, where an OS command injection vulnerability could allow an authenticated non-admin attacker to run arbitrary OS commands on the underlying system with the vulnerable app’s privileges. The available sources confirm t...

sudo security update

1.8.23-10.3 RHEL 7.9.Z ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz2161222 1.8.23-10.2 - RHEL 7.9.Z ERRATUM - defaults usepty plus SELinux ROLE in user specification breaks terminal Resolves: rhbz1972820 1.8.23-10.1 - RHEL 7.9.Z ERRATUM -...

PT-2022-26939 · Unknown · Salon Booking System

Name of the Vulnerable Software and Affected Versions: Salon booking system versions prior to 7.9 Description: A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script. Recommendations: For versions prior to 7.9, update to version 7.9 or later to resolve...

F5 Networks BIG-IP : OpenSSH vulnerability (K42531048)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10 / 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K42531048 advisory. In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server ...

pki-core security update

10.5.18-23 - - RHEL 7.9 Batch Update 18: - - Bugzilla Bug 2107329 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE rhel-7.9.z ckelley, mharmsen - Bugzilla Bug 2111514 - CVE-2022-2393 pki-core: When using the caServerKeygenDirUserCert profile, user can get...

CVE-2022-34001

Unit4 ERP (up to v7.9) is affected by a XXE vulnerability in the ExecuteServerProcessAsynchronously path. The root cause is an XML External Entity injection in that component, enabling potential disclosure of sensitive data via network-exposed input. Public details in connected sources confirm th...