CVE-2020-7936

An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...

CVE-2020-7936

CVE-2020-7936 describes an open redirect in Plone 4.0–5.2.1 on the login form (and possibly other entry points). The vulnerability allows an attacker to craft a link that, after following and possibly after login, redirects the user to the attacker's site. Affected software is Plone (4.0–5.2.1); ...

CVE-2019-7936

Summary: CVE-2019-7936 is a stored cross-site scripting (XSS) vulnerability in Magento Open Source/Commerce admin panel. Affected versions (per sources): Magento 2.1 before 2.1.18, Magento 2.2 before 2.2.9, and Magento 2.3 before 2.3.2. The issue arises from insufficient validation allowing an au...

CVE-2018-7936

CVE-2018-7936 affects Huawei Mate 10 Pro devices with firmware prior to BLA-L29 8.0.0.148 (C432). The FRP bypass occurs when reconfiguring FRP; an attacker can connect the phone to a PC and issue instructions to install a third‑party desktop and disable the boot wizard, effectively bypassing FRP ...

Security Advisory - FRP Bypass Vulnerability in Huawei Smart Phones

There is Factory Reset Protection FRP bypass security vulnerability in some Huawei smart phones. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can connect the phone with PC and send special instructions to install third party desktop and disable...

Photon OS 1.0: Tcpdump PHSA-2017-0004 (deprecated)

An update of tcpdump packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0004. The text itself is copyright C VMware, Inc...

EulerOS 2.0 SP1 : tcpdump (EulerOS-SA-2017-1179)

According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker...

EulerOS 2.0 SP2 : tcpdump (EulerOS-SA-2017-1180)

According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker...

Scientific Linux Security Update : tcpdump on SL7.x x86_64 (20170801)

The following packages have been upgraded to a later upstream version: tcpdump 4.9.0. Security Fixes : - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send special...

CVE-2017-7936

A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, i.MX 6QuadPlus, Vybrid VF3xx, Vybrid VF5xx, and Vybrid VF6xx. When the device is configured in...

CVE-2017-7936

CVE-2017-7936 describes a stack-based buffer overflow in multiple NXP i.MX and Vybrid families (e.g., i.MX 50/53, 6ULL/6Solo/6Quad variants, Vybrid VF3xx/VF5xx/VF6xx). When the device is in security-enabled configuration, the Serial Download Protocol (SDP) could be used to write a small section o...

RedHat Update for tcpdump RHSA-2017:1871-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2017:1110-1 Security update for tcpdump, libpcap

This update for tcpdump to version 4.9.0 and libpcap to version 1.8.1 fixes the several issues. These security issues were fixed in tcpdump: - CVE-2016-7922: The AH parser in tcpdump had a buffer overflow in print-ah.c:ahprint bsc1020940. - CVE-2016-7923: The ARP parser in tcpdump had a buffer...

SUSE SLES11 Security Update : tcpdump (SUSE-SU-2017:0656-1)

This update for tcpdump fixes the following issues: Security issues fixed bsc1020940 : - CVE-2016-7922: Corrected buffer overflow in AH parser print-ah.c:ahprint. - CVE-2016-7923: Corrected buffer overflow in ARP parser print-arp.c:arpprint. - CVE-2016-7925: Corrected buffer overflow in compresse...

CVE-2016-7936

The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udpprint...

CVE-2016-7936

CVE-2016-7936: tcpdump before 4.9.0 has a buffer overflow in the UDP parser (print-udp.c:udp_print). A crafted packet could overflow a buffer and allow arbitrary code execution or crash. Affected upstream fixed by upgrading to tcpdump 4.9.0; various advisories (CentOS, Debian, Alpine) reference t...

CVE-2016-7936

The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udpprint...

CVE-2016-7936

The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udpprint...

UBUNTU-CVE-2016-7936

The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udpprint...

CVE-2015-7936

CVE-2015-7936: CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway’s web-based management enables remote attackers to hijack an administrator’s session to change a password. Affected product: MOSCAD IP Gateway (all versions) with web access; root cause described as CSRF without proper anti...