51 matches found
SUSE SLES12 Security Update : perl-DBI (SUSE-SU-2020:2856-1)
This update for perl-DBI fixes the following issues : CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. CVE-2013-7490: Fixed memory corruption when using many arguments to methods for CallbacksUsing bsc1176496. Note that Tenable Network Security has extracted the precedin...
USN-4509-1 libdbi-perl vulnerabilities
It was discovered that Perl DBI module incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. CVE-2013-7490 It was discovered that Perl DBI module incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive...
USN-4509-1: Perl DBI module vulnerabilities
It was discovered that Perl DBI module incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. CVE-2013-7490 It was discovered that Perl DBI module incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive...
CVE-2013-7490
creationtimestamp| type| source ---|---|--- 2020-09-11 22:55:33+00:00| seen| https://t.me/cibsecurity/14628...
CVE-2013-7490
Summary: CVE-2013-7490 affects the Perl DBI module prior to 1.632, where using many arguments to Callback methods may cause memory corruption. This issue is repeatedly reflected across multiple advisories (including SUSE/Red Hat/Nessus entries) and is acknowledged as a memory corruption bug in DB...
CVE-2020-7490
A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...
CVE-2020-7490
Summary (CVE-2020-7490): The vulnerability is a CWE-426 Untrusted Search Path issue in Schneider Electric’s Vijeo Designer software. Affected products/versions include Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior). The underlying issue is that loading a m...
CVE-2017-8087
Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate attackers to view slices of previously transmitted packets or portions of memory via via unspecified vectors...
Information disclosure
Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate attackers to view slices of previously transmitted packets or portions of memory via via unspecified vectors...
CVE-2017-8087
The affected device is AVM Fritz!Box 7490 running Fritz!OS 6.80 or 6.83. The issue is an information leakage in PPPoE packet padding that can allow physically proximate attackers to view slices of previously transmitted packets or portions of memory via unspecified vectors. The connected sources ...
Fedora Update for uwsgi FEDORA-2018-acfce682f4
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4142-1] uwsgi security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4142-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 17, 2018 https://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-4142-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
uWSGI Directory Traversal
Exploit Title: uWSGI PHP Plugin Directory Traversal Date: 01-03-2018 Exploit Author: Marios Nicolaides - RUNESEC Reviewers: Simon Loizides and Nicolas Markitanis - RUNESEC Vendor Homepage: https://uwsgi-docs.readthedocs.io Affected Software: uWSGI PHP Plugin before 2.0.17 Tested on: uWSGI 2.0.12...
uWSGI < 2.0.17 - Directory Traversal
Exploit Title: uWSGI PHP Plugin Directory Traversal Date: 01-03-2018 Exploit Author: Marios Nicolaides - RUNESEC Reviewers: Simon Loizides and Nicolas Markitanis - RUNESEC Vendor Homepage: https://uwsgi-docs.readthedocs.io Affected Software: uWSGI PHP Plugin before 2.0.17 Tested on: uWSGI 2.0.12...
uWSGI < 2.0.17 - Directory Traversal Vulnerability
Exploit for php platform in category web applications Exploit Title: uWSGI PHP Plugin Directory Traversal Exploit Author: Marios Nicolaides - RUNESEC Reviewers: Simon Loizides and Nicolas Markitanis - RUNESEC Vendor Homepage: https://uwsgi-docs.readthedocs.io Affected Software: uWSGI PHP Plugin...
CVE-2018-7490
creationtimestamp| type| source ---|---|--- 2018-03-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44223 2026-04-15 14:28:38+00:00| exploited| https://github.com/range42/range42-catalog/tree/main/03containerlayer/docker/ctf/cve/web/uwsgphp/CVE-2018-7490 2026-06-19 12:45:35+00:0...
CVE-2018-7490
uWSGI before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, allowing directory traversal...
liveprofiler (>=0.2.0 <=1.0.0), prediction (=0.0.3) potentially affected by CVE-2018-7490 via uwsgi (>=2.0.13.1 <=2.0.15)
uwsgi PYPI version =2.0.13.1, =0.2.0, =1.0.0 - prediction =0.0.3 Source cves: CVE-2018-7490 Source advisory: OSV:PYSEC-2018-78...
CVE-2018-7490
CVE-2018-7490 affects the uWSGI PHP plugin before 2.0.17, where the PHP-DOCROOT validation fails, enabling directory traversal via the --php-docroot option and potentially exposing sensitive files outside the web root. Evidence in connected docs shows Debian security advisories fixing to versions...