MAL-2024-847 Malicious code in wlwz-2312-7502 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e05d19cb4731bbbec8c578bd55a6c6a32e2e957225d96f07aa8a6d7c46df6a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHEL 8 : thunderbird (RHSA-2023:7502)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:7502 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.5.0. Security Fixes: Mozilla:...

Debian: Security Advisory (DLA-971-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Schneider Electric Modicon Out-of-bounds Write (CVE-2020-7502)

A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller Firmware version 4.3 and prior, which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller. This plugin only works with Tenable.ot. Please visit...

K55143785: NSS vulnerability CVE-2017-7502

Security Advisory Description Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker. CVE-2017-7502 Impact There is no impact; F5 products are not affected by this vulnerability. Security...

Security Bulletin: Vulnerability in Mozilla NSS affects the IBM FlashSystem models 840 and 900

Summary There is a vulnerability in Mozilla Network Security Services NSS to which the IBM® FlashSystem™ 840 and FlashSystem™ 900 are susceptible. An exploit of this vulnerability CVE-2017-7502 could to cause a denial of service. Vulnerability Details CVEID: CVE-2017-7502 DESCRIPTION: Mozilla...

Beckhoff TwinCAT Untrusted Pointer Dereference (CVE-2018-7502)

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges. This plugin only works wi...

Mageia: Security Advisory (MGASA-2017-0160)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-7502

A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller Firmware version 4.3 and prior, which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller...

CVE-2020-7502

CVE-2020-7502 is a documented out-of-bounds write vulnerability (CWE-787) in the Schneider Electric Modicon M218 Logic Controller, affecting firmware versions 4.3 and earlier. The issue arises from an out-of-bounds write in the controller, which may allow a crafted TCP/IP packet sequence to cause...

Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2017-1108)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2017-1109)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NewStart CGSL MAIN 4.05 : nss Multiple Vulnerabilities (NS-SA-2019-0105)

The remote NewStart CGSL host, running version MAIN 4.05, has nss packages installed that are affected by multiple vulnerabilities: - An out-of-bounds write flaw was found in the way NSS performed certain Base64-decoding operations. An attacker could use this flaw to create a specially crafted...

Security Bulletin: A vulnerability in NSS affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Network Security Services NSS. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7502 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox, is vulnerable to a denial of service, caused by a...

CVE-2017-14794

CVE-2017-14794 is rejected; this candidate should reference CVE-2018-7502 and is not an active vulnerability entry.

CVE-2017-14790

CVE-2018-7502 is described in connected documents as a vulnerability in Beckhoff TwinCAT where kernel drivers in TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker capable of code execution on the target could exploi...

CVE-2017-14788

CVE-2018-7502 (Beckhoff TwinCAT) involves an untrusted pointer dereference in Beckhoff TwinCAT kernel drivers. The vulnerability affects TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1, where user-supplied pointer values are not properly validated. An attacker who can execute code...

CVE-2017-14779

CVE-2017-14779 is a reservation duplicate of CVE-2018-7502; connected records focus on CVE-2018-7502, which affects Beckhoff TwinCAT kernels: untrusted pointer dereference in TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1, allowing code execution with SYSTEM privileges if an atta...

CVE-2017-14786

CVE-2017-14786 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14793

Beckhoff TwinCAT: CVE-2018-7502 (linked via duplicate of CVE-2017-14793) affects kernel drivers in TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1. Root cause is lack of proper validation of user-supplied pointer values in kernel drivers, enabling a code-executing attack to obtain...