49 matches found
CVE-2020-7673
node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument A of extend functionA,B,as,isAargs located within lib/extend.js is executed by the eval function, resulting in code execution...
CVE-2020-7673
node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument A of extend functionA,B,as,isAargs located within lib/extend.js is executed by the eval function, resulting in code execution...
CVE-2020-7673
node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument A of extend functionA,B,as,isAargs located within lib/extend.js is executed by the eval function, resulting in code execution...
CVE-2020-7673
CVE-2020-7673 affects node-extend up to version 0.2.0. The vulnerability arises in the extend(A,B,as,isAargs) function (lib/extend.js) where user input is passed to eval, enabling Arbitrary Code Execution. Affected: node-extend 0.2.0 and earlier. Impact: potential remote code execution with netwo...
@qbunnyteam/superlogin (>=0.0.3, <=0.0.4), @sensu/superlogin (>=1.2.2, <=1.2.6) +16 more potentially affected by CVE-2020-7673 via node-extend (0.2.0)
node-extend NPM version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-extend and may be impacted: - @qbunnyteam/superlogin =0.0.3, =1.2.2, =0.1.0, =0.1.0, =0.0.0, =0.2.0, =4.1.4, =1.1.0, =1.4.1 and more Source cves: CVE-2020-7673 Source...
CVE-2019-7673
The vulnerability CVE-2019-7673 affects MOBOTIX S14 MX-V4.2.1.61 devices. The issue is that Administrator credentials are stored using a 13-character DES hash format, i.e., a weak cryptographic representation for admin credentials. This is documented in multiple feeds (e.g., Tenable plugin notes ...
CVE-2018-7673
The CVE-2018-7673 entry describes a DoS vulnerability in the NetIQ Identity Manager communication channel for versions prior to 4.7. The affected product is NetIQ Identity Manager; affected component is the communication channel. The vulnerability allows a denial of service, with multiple sources...
CVE-2018-7673 NetIQ Identity Manager DoS Attack
The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack...
CVE-2017-7673
Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection...
CVE-2017-7673
Apache OpenMeetings 1.0.0 is affected by CVE-2017-7673 due to weak cryptographic storage and missing brute-force protection in authentication-related forms, with registration and password-reset flows lacking captcha. Connected docs confirm the vulnerability details but do not provide a remediatio...
CVE-2016-7673
CVE-2016-7673 entry is rejected/not used; not representing an active vulnerability.
CVE-2014-7673
This CVE-2014-7673 entry is rejected/not used; it does not represent an active vulnerability.
openSUSE Security Update : gdk-pixbuf (openSUSE-2016-669)
This update for gdk-pixbuf fixes the following issues : - CVE-2015-7552: Fixed various overflows in image handling boo958963. - CVE-2015-7673: Fixed an overflow and DoS with a TGA file boo948790. - CVE-2015-7674: Fixed overflow when scaling a gif boo948791. %NASLMINLEVEL 70300 C Tenable Network...
openSUSE Security Update : gdk-pixbuf (openSUSE-2016-405)
This update for gdk-pixbuf fixes the following issues : - CVE-2015-7552: Fixed various overflows in image handling boo958963. - CVE-2015-7673: Fixed an overflow and DoS with a TGA file boo948790. - CVE-2015-7674: Fixed overflow when scaling a gif boo948791. %NASLMINLEVEL 70300 C Tenable Network...
Debian DLA-434-1 : gtk+2.0 security update
Gustavo Grieco discovered different security issues in Gtk+2.0's gdk-pixbuf. CVE-2015-4491 Heap overflow when processing BMP images which may allow to execute of arbitrary code via malformed images. CVE-2015-7673 Heap overflow when processing TGA images which may allow execute arbitrary code or...
[SECURITY] [DLA 434-1] gtk+2.0 security update
Package : gtk+2.0 Version : 2.20.1-2+deb6u2 CVE ID : CVE-2015-4491 CVE-2015-7673 CVE-2015-7674 Gustavo Grieco discovered different security issues in Gtk+2.0s gdk-pixbuf. CVE-2015-4491 Heap overflow when processing BMP images which may allow to execute of arbitrary code via malformed images...
SUSE SLED12 / SLES12 Security Update : gdk-pixbuf (SUSE-SU-2015:2195-2)
The gdk pixbuf library was updated to fix three security issues. These security issues were fixed : - CVE-2015-7673: Fix some more overflows scaling a gif bsc948791 - CVE-2015-4491: Check for overflow before allocating memory when scaling bsc942801 - CVE-2015-7673: Fix an overflow and DoS when...
Gentoo Security Advisory GLSA 201512-05
Gentoo Linux Local Security Checks GLSA 201512-05 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...