CVE-2020-8798

httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated setup3.htm endpoint from the local network...

CVE-2020-8798

The vulnerability CVE-2020-8798 affects Juplink RX4-1500 routers (firmware versions v1.0.3–v1.0.5). The httpd service exposes an unauthenticated setup3.htm endpoint on the local network, which allows remote attackers to change or access router settings. The exposed detail in connected CNVD/NVD en...

CVE-2019-8798

CVE-2019-8798 is a memory corruption vulnerability reported in Apple OS components that could allow an application to execute arbitrary code with system privileges. The NVD and Red Hat records mirror the Apple advisory, noting fixes in iOS 13.2 / iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, an...

openSUSE Security Update : rdesktop (openSUSE-2019-2135)

This update for rdesktop fixes the following issues : rdesktop was updated to 1.8.6 : - Fix protocol code handling new licenses rdesktop was updated to 1.8.5 : - Add bounds checking to protocol handling in order to fix many security problems when communicating with a malicious server. rdesktop wa...

Fedora Update for rdesktop FEDORA-2019-ac70292cfc

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Debian DSA-4394-1 : rdesktop - security update

Multiple security issues were found in the rdesktop RDP client, which could result in denial of service, information disclosure and the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Fedora 28 : rdesktop (2019-5146cd34e2)

Update to 1.8.4. Security fix for CVE-2018-8794 CVE-2018-8795 CVE-2018-8797 CVE-2018-20175 CVE-2018-20176 CVE-2018-8791 CVE-2018-8792 CVE-2018-8793 CVE-2018-8796 CVE-2018-8798 CVE-2018-8799 CVE-2018-8800 CVE-2018-20174 CVE-2018-20177 CVE-2018-20178 CVE-2018-20179 CVE-2018-20180 CVE-2018-20181...

CVE-2018-8798

CVE-2018-8798 affects the rdesktop RDP client up to version 1.8.3, where rdpsnd_process_ping() contains an out-of-bounds read that leads to information leakage. Public sources in the connected documents confirm the vulnerability class as an information disclosure issue in rdesktop prior to 1.8.4....

Updated rdesktop package fixes security vulnerabilities

rdesktop has been updated to fix multiple CVE's. Fix memory corruption in processbitmapdata - CVE-2018-8794 Fix remote code execution in processbitmapdata - CVE-2018-8795 Fix remote code execution in processplane - CVE-2018-8797 Fix Denial of Service in mcsrecvconnectresponse - CVE-2018-20175 Fix...

rdesktop - critical - Remote Code Execution

Fix memory corruption in processbitmapdata - CVE-2018-8794 Fix remote code execution in processbitmapdata - CVE-2018-8795 Fix remote code execution in processplane - CVE-2018-8797 Fix Denial of Service in mcsrecvconnectresponse - CVE-2018-20175 Fix Denial of Service in mcsparsedomainparams -...

CVE-2017-8798

Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2017-8798

CVE-2017-8798 concerns an integer signedness error in the MiniUPnP library (MiniUPnPc) used by miniupnpc. AffectedVersions: v1.4.20101221 through v2.0. Root cause: a signedness/bounds issue in the getHTTPResponse/miniwget path that parses chunked-encoded HTTP responses. Impact: remote attacker co...

CVE-2016-8798

CVE-2016-8798 affects Huawei USG5500 devices. The vulnerability allows an attacker to bypass the anti-DDoS module, enabling a denial-of-service condition on the backend server. Affected software versions are V300R001C00 (and related build series mentioned in sources). The issue stems from a defen...

Security Advisory - Defense Mechanism Bypass Vulnerability in Huawei USG Products

There is a defense mechanism bypass vulnerability in Huawei USG products. Successful exploit could allow an attacker to bypass the anti-DDoS module of the USGs to send massive HTTP packets, possibly causing a denial of service condition on the backend server. Vulnerability ID: HWPSIRT-2016-07050...

CVE-2015-8798

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection SES:CSP 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices SES:CSP 6.5.0 before MP1, Critical System Protection SCSP before 5.2.9 MP6,...

CVE-2015-8798

CVE-2015-8798 describes a directory traversal vulnerability in the Management Server of Symantec’s SES:CSP/SDCS:SA family. Affected products include SES:CSP 1.0.x (before 1.0 MP5), SES:CSP for Controllers and Devices 6.5.0 (before MP1), SCSP 5.2.9 (before MP6), DCS:SA 6.x (before 6.5 MP1) and 6.6...