77 matches found
MAL-2024-847 Malicious code in wlwz-2312-7502 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e05d19cb4731bbbec8c578bd55a6c6a32e2e957225d96f07aa8a6d7c46df6a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHEL 8 : thunderbird (RHSA-2023:7502)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:7502 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.5.0. Security Fixes: Mozilla:...
Debian: Security Advisory (DLA-971-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Schneider Electric Modicon Out-of-bounds Write (CVE-2020-7502)
A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller Firmware version 4.3 and prior, which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller. This plugin only works with Tenable.ot. Please visit...
K55143785: NSS vulnerability CVE-2017-7502
Security Advisory Description Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker. CVE-2017-7502 Impact There is no impact; F5 products are not affected by this vulnerability. Security...
Security Bulletin: Vulnerability in Mozilla NSS affects the IBM FlashSystem models 840 and 900
Summary There is a vulnerability in Mozilla Network Security Services NSS to which the IBM® FlashSystem™ 840 and FlashSystem™ 900 are susceptible. An exploit of this vulnerability CVE-2017-7502 could to cause a denial of service. Vulnerability Details CVEID: CVE-2017-7502 DESCRIPTION: Mozilla...
Beckhoff TwinCAT Untrusted Pointer Dereference (CVE-2018-7502)
Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges. This plugin only works wi...
Mageia: Security Advisory (MGASA-2017-0160)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-7502
A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller Firmware version 4.3 and prior, which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller...
CVE-2020-7502
CVE-2020-7502 is a documented out-of-bounds write vulnerability (CWE-787) in the Schneider Electric Modicon M218 Logic Controller, affecting firmware versions 4.3 and earlier. The issue arises from an out-of-bounds write in the controller, which may allow a crafted TCP/IP packet sequence to cause...
Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2017-1109)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2017-1108)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NewStart CGSL MAIN 4.05 : nss Multiple Vulnerabilities (NS-SA-2019-0105)
The remote NewStart CGSL host, running version MAIN 4.05, has nss packages installed that are affected by multiple vulnerabilities: - An out-of-bounds write flaw was found in the way NSS performed certain Base64-decoding operations. An attacker could use this flaw to create a specially crafted...
Security Bulletin: A vulnerability in NSS affects PowerKVM
Summary PowerKVM is affected by a vulnerability in Network Security Services NSS. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7502 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox, is vulnerable to a denial of service, caused by a...
CVE-2017-14777
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-14794
CVE-2017-14794 is rejected; this candidate should reference CVE-2018-7502 and is not an active vulnerability entry.
CVE-2017-14785
CVE-2017-14785 is a reserved duplicate of CVE-2018-7502; per connected sources, CVE-2018-7502 describes Beckhoff TwinCAT kernel driver vulnerability with an untrusted pointer dereference in specific TwinCAT builds. Affected products include Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259,...
CVE-2017-14786
CVE-2017-14786 is rejected/not used; reference CVE-2018-7502 instead.
CVE-2017-14783
CVE-2017-14783 is a reservation duplicate of CVE-2018-7502. Connected documents provide concrete details for CVE-2018-7502: Beckhoff TwinCAT kernel drivers (TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1) fail to validate user-supplied pointer values, enabling an attacker able to...