32381 matches found
Buffer overflow
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service DoS and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 versio...
CVE-2020-5141
A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS...
CVE-2020-5137
SonicOS contains a buffer overflow allowing a remote unauthenticated attacker to cause DoS on the SSLVPN service and crash the firewall. Affected: SonicOS Gen 5 (5.9.1.7, 5.9.1.13), Gen 6 (6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv 6.5.4.v, Gen 7 (7.0.0.0). Root cause: buffer overflow in SSLVPN handli...
CVE-2020-5134
A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. This vulnerability affected SonicOS Gen 6 version 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2020-5884)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5884 advisory. - xfs: fix boundary test in xfsattrshortformverify Eric Sandeen Orabug: 31895365 CVE-2020-14385 - ext4: fix potential negative array index in dospl...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5879)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5879 advisory. - USB: serial: omninet: fix reference leaks at open Mark Nicholson Orabug: 30484762 CVE-2017-8925 - GFS2: don't set rgrp globject until it's insert...
CVE-2020-5135
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service DoS and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 versio...
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: October 13, 2020
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: October 13, 2020 Applies to Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service...
CVE-2021-37322 affecting package gcc 9.1.0-7
CVE-2021-37322 affecting package gcc 9.1.0-7. A patched version of the package is available...
CVE-2019-15847 affecting package gcc 9.1.0-7
CVE-2019-15847 affecting package gcc 9.1.0-7. A patched version of the package is available...
CVE-2020-24330 affecting package trousers 0.3.14-7
CVE-2020-24330 affecting package trousers 0.3.14-7. A patched version of the package is available...
Moderate: Red Hat Security Advisory: Red Hat AMQ Interconnect 1.9.0 release and security update
Red Hat AMQ Interconnect 1.9.0 release packages are available for A-MQ Interconnect on RHEL 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Oracle Linux 7 : nss / and / nspr (ELSA-2020-4076)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4076 advisory. - include patches for CVE-2020-6829, CVE-2020-12400, and CVE-2020-12401 from upstream ECC constant time issues. - include patches for CVE-2020-12403 fr...
Oracle Linux 7 : squid (ELSA-2020-4082)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4082 advisory. - Resolves: 1872349 - CVE-2020-24606 squid: Improper Input Validation could result in a DoS - Resolves: 1872327 - CVE-2020-15810 squid: HTTP Request...
Oracle Linux 7 : libcroco (ELSA-2020-4072)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4072 advisory. 0.6.12-6 - Rebuild with 7.9-z target Related: 1835951 0.6.12-5 - Fix CVE-2020-12825 Resolves: 1835951 Tenable has extracted the preceding description block...
Oracle Linux 7 : qemu-kvm (ELSA-2020-4079)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4079 advisory. 1.5.3-175.el79.1 - Fixing release number for z-stream Tenable has extracted the preceding description block directly from the Oracle Linux security...
Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7
Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 Vaadin 7.0.0 through 7.7.21 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses. See CWE-400: Uncontrolled Resource Consumption Description...
RHEL 7 : go-toolset-1.13-golang (RHSA-2020:4214)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4214 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang.org/x/text:...
Oracle Linux 7 : spice / and / spice-gtk (ELSA-2020-4187)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4187 advisory. - Fix multiple buffer overflows in QUIC decoding code Resolves: CVE-2020-14355 spice-gtk Tenable has extracted the preceding description block directly from the...
apollo-kk.co.jp Cross Site Scripting vulnerability OBB-1388458
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...