FreeBSD : Node.js -- September 2020 Security Releases (4ca5894c-f7f1-11ea-8ff8-0022489ad614)

Node.js reports : Updates are now available for v10,x, v12.x and v14.x Node.js release lines for the following issues. HTTP Request Smuggling due to CR-to-Hyphen conversion High CVE-2020-8201 Affected Node.js versions converted carriage returns in HTTP request headers to a hyphen before parsing...

Security fix for the ALT Linux 9 package node version 14.11.0-alt1

Sept. 16, 2020 Vitaly Lipatov 14.11.0-alt1 - new version 14.11.0 with rpmrb script - CVE-2020-8251: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests Critical - CVE-2020-8201: HTTP Request Smuggling due to CR-to-Hyphen conversion High...

Node.js -- September 2020 Security Releases

Node.js reports: Updates are now available for v10,x, v12.x and v14.x Node.js release lines for the following issues. HTTP Request Smuggling due to CR-to-Hyphen conversion High CVE-2020-8201 Affected Node.js versions converted carriage returns in HTTP request headers to a hyphen before parsing...

CVE-2019-8251

creationtimestamp| type| source ---|---|--- 2020-07-06 22:55:22+00:00| seen| https://t.me/cibsecurity/13262...

CVE-2019-8251

CVE-2019-8251 affects Adobe Acrobat and Reader; a type confusion vulnerability could lead to information disclosure. Affected versions include Adobe Acrobat and Reader 2019.012.20035 and earlier, 2017.011.30142 and 2017.011.30143 and earlier, and 2015.006.30497 and 2015.006.30498 and earlier. Roo...

SSL / TLS Certificate Known Hard Coded Private Keys

The remote host is running a service that is using a publicly known SSL / TLS private key. An attacker may use this key to decrypt intercepted traffic between users and the device. A remote attacker can also perform a man-in-the-middle attack in order to gain access to the system or modify data i...

CVE-2018-8251

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Corruption Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serve...

CVE-2018-8251

CVE-2018-8251 describes a memory corruption vulnerability in Windows Media Foundation when it improperly handles objects in memory. Affected: Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (Server 2008 R2, 2012, 2012 R2, 2016; Windows RT 8.1). CVSSv3 base 7.5 (NETWORK, HIGH ...

Microsoft Media Foundation Memory Corruption (CVE-2018-8251)

A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

KB4284860: Windows 10 June 2018 Security Update

The remote Windows host is missing security update 4284860. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Human Interface Device HID Parser Library driver improperly handles objects in memory. An attacker who successfully...

KB4284880: Windows 10 Version 1607 and Windows Server 2016 June 2018 Security Update

The remote Windows host is missing security update 4284880. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Human Interface Device HID Parser Library driver improperly handles objects in memory. An attacker who successfully...

Microsoft Windows Media Foundation CVE-2018-8251 Memory Corruption Vulnerability

Description Microsoft Windows is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Windows 10 Version 1607 for...

KB4284846: Windows Server 2012 June 2018 Security Update

The remote Windows host is missing security update 4284846 or cumulative update 4284855. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Human Interface Device HID Parser Library driver improperly handles objects in memory. An...

CVE-2015-8251

OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScap...

CVE-2015-8251

Technical details (affected products, root cause, versions, exploit info) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2015-8251

OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScap...

CVE-2017-8251

CVE-2017-8251 affects Qualcomm camera driver components in Android CAF builds on Linux kernels. The bug arises when msm_isp_check_stream_cfg_cmd and msm_isp_stats_update_cgc_override fail to validate stream_cfg_cmd->num_streams, allowing an overflow of stream_cfg_cmd->stream_handle. The CVE...

CVE-2016-8251

CVE-2016-8251 is rejected/not used and does not represent an active vulnerability entry.

Fedora Update for java-1.8.0-openjdk FEDORA-2015-8251

The remote host is missing an update for the Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SuSE 10 Security Update : gimp (ZYPP Patch Number 8251)

This update of The Gimp fixes a heap overflow that could have been exploited by attackers to cause a Denial of Service application crash or even to potentially execute arbitrary code. CVE-2012-3402 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...