29 matches found
SonicWall SMA100 Pre-authentication directory traversal
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. CVE: CVE-2019-7483 Last updated: March 6, 2020, 4:42 a.m...
CVE-2013-7483
creationtimestamp| type| source ---|---|--- 2019-08-23 00:32:52+00:00| seen| https://t.me/cibsecurity/6327 2019-08-29 16:33:49+00:00| seen| https://t.me/cibsecurity/6444...
CVE-2013-7483
CVE-2013-7483 affects the WordPress slidedeck2 plugin up to version 2.3.5, which contains a file inclusion vulnerability in the plugin’s code. The issue is confirmed across multiple sources; CVSS scores indicate NETWORK access with low complexity and no authentication, leading to high impact on c...
openSUSE Security Update : rxvt-unicode (openSUSE-2017-670)
This update for rxvt-unicode fixes the following issue : While urxvt is not directly affected by CVE-2017-7483 we have added a patch to harden urxvt to avoid similar bugs in the future. boo1036456 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
CVE-2016-7483
CVE-2016-7483 is explicitly rejected/not used; this entry does not represent an active vulnerability.
CVE-2017-7483
Rxvt 2.7.10 is vulnerable to denial-of-service via a crafted terminal escape code (-2^31), causing a non-invertible integer and an out-of-bounds read that leads to a segfault. Affected product: rxvt (VT102 terminal emulator for X). Root cause: improper handling of certain escape sequences. Impact...
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : rxvt (SSA:2017-121-01)
New rxvt packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-121-01. The tex...
CVE-2014-7483
CVE-2014-7483 affects the Desire2Learn FUSION 2014 Android app (com.desire2learn.fusion2012) version 4.0.729.1748. The root cause is that the client does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...