Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1477)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-7271

Nortek Linear eMerge 50P/5000P devices have Default Credentials...

CVE-2019-7271

CVE-2019-7271 concerns Nortek Linear eMerge 50P/5000P devices where the issue is the use of default credentials. Red Hat’s analyses tie this to admin credential exposure (e.g., credentials present in /test.txt for E3-Series) which can enable an attacker to open building doors when default credent...

Code injection

An issue was discovered in MetInfo 6.0.0. install\index.php allows remote attackers to write arbitrary PHP code into configdb.php, a different vulnerability than CVE-2018-7271...

CVE-2014-7271

Simple Desktop Display Manager SDDM before 0.10.0 allows local users to log in as user "sddm" without authentication...

CVE-2014-7271

CVE-2014-7271 affects Simple Desktop Display Manager (SDDM). It describes an authentication flaw where versions prior to 0.10.0 allow local users to log in as the user "sddm" without authentication. Impact is local access and credential-free logins for that account. Mitigation: upgrade to SDDM 0....

CVE-2014-7271

Simple Desktop Display Manager SDDM before 0.10.0 allows local users to log in as user "sddm" without authentication...

CVE-2018-7271

CVE-2018-7271 affects MetInfo 6.0.0. In the installer (install/install.php), the config/config_db.php filtering during installation is insufficient, allowing an attacker to inject malicious code and potentially execute arbitrary commands or obtain a web shell. The root cause is sloppy filtering o...

h.225.0 Manufacturer Detection

Binary data 7271.pasl...

CVE-2015-7271

Dell iDRAC7/8 (before 2.21.21.21) is affected by a format-string issue in racadm getsystinfo. The vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on affected devices (impacting confidentiality, integrity, and availability). Dell released fixed ve...

CVE-2017-7271

CVE-2017-7271 describes a reflected XSS in the Yii Framework prior to 2.0.11. In development mode, crafted request data can be mishandled on the debug-mode exception screen, allowing remote attackers to inject arbitrary script/HTML. Affected product/version: Yii Framework before 2.0.11 (developme...

CVE-2017-7271

Reflected Cross-site scripting XSS vulnerability in Yii Framework before 2.0.11, when development mode is used, allows remote attackers to inject arbitrary web script or HTML via crafted request data that is mishandled on the debug-mode exception screen...

CVE-2016-7271

The CVE-2016-7271 issue affects Microsoft Windows 10 (Gold, 1511, 1607) and Windows Server 2016, where Windows Secure Kernel Mode could be abused to bypass the Virtual Trust Level (VTL). The root cause is improper handling of memory objects in Secure Kernel Mode, allowing a locally authenticated ...

KLA10923 Privilege escalation vulnerability in Microsoft Windows

Improper objects handling in memory was found in the Secure Kernel Mode implementation in Microsoft Windows. By exploiting this vulnerability malicious users can gain priveleges and violate virtual trust levels VTL. This vulnerability can be exploited locally via a specially designed application...

MS16-150: Security Update for Secure Kernel Mode (3205642)

The remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability in Windows Secure Kernel Mode due to improper handling of objects in memory. A local attacker can exploit this, via a specially crafted application, to bypass virtual trust...

Updated sddm packages fix security vulnerabilities

Sddm may in some cases allow unauthenticated logins as the sddm user CVE-2014-7271. Sddm is vulnerable to a race condition in XAUTHORITY file generation CVE-2014-7272. Sddm has been updated to version 0.10.0, fixing these issues and several other bugs, and adding new functionality. libxcb package...

Fedora 21 : sddm-0.9.0-2.20141007git6a28c29b.fc21 (2014-12442)

Bump to latest upstream git and a new release, fixes CVE-2014-7271 and CVE-2014-7272 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for sddm FEDORA-2014-12308

Check the version of sddm SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868438";...

Fedora 20 : sddm-0.9.0-2.20141007git6a28c29b.fc20 (2014-12308)

Bump to latest upstream git and a new release, fixes CVE-2014-7271 and CVE-2014-7272 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Ubuntu Update for linux-ec2 USN-2129-1

Check for the Version of linux-ec2 OpenVAS Vulnerability Test $Id: gbubuntuUSN21291.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for linux-ec2 USN-2129-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...