WebCTRL Out-Of-Band XML Injection

CVE-2018-8819 Product Description WebCTRL is a BACnet native, intelligent, HVAC and energy control system for your building. A proven, industry-leading system, the WebCTRLAr building automation system gives you the ability to fully understand your operations and analyze the results with tools tha...

Fedora 27 : tor (2017-bc2edc421d)

update to upstream release 0.3.1.9. Fixes various CVEs : - CVE-2017-8819: Replay-cache ineffective for v2 onion services - CVE-2017-8820: Remote DoS attack against directory authorities - CVE-2017-8821: An attacker can make Tor ask for a password - CVE-2017-8822: Relays can pick themselves in a...

Fedora Update for tor FEDORA-2017-bc2edc421d

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for tor FEDORA-2017-bce9e03721

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ASA-201712-10] tor: multiple issues

Arch Linux Security Advisory ASA-201712-10 ========================================== Severity: High Date : 2017-12-16 CVE-ID : CVE-2017-8819 CVE-2017-8820 CVE-2017-8822 CVE-2017-8823 Package : tor Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-539 Summary ======= T...

openSUSE Security Update : tor (openSUSE-2017-1336)

This update for tor fixes vulnerabilities that allowed some traffic confirmation, DoS and other attacks bsc1070849 : - CVE-2017-8819: Replay-cache ineffective for v2 onion services - CVE-2017-8820: Remote DoS attack against directory authorities - CVE-2017-8821: An attacker can make Tor ask for a...

Security fix for the ALT Linux 8 package tor version 0.3.1.9-alt1.M80P.1

0.3.1.9-alt1.M80P.1 built Dec. 6, 2017 Vladimir Didenko in task 195838 Dec. 1, 2017 Vladimir Didenko - new version Fixes: CVE-2017-8819, CVE-2017-8820, CVE-2017-8821, CVE-2017-8822, CVE-2017-8823...

Debian DSA-4054-1 : tor - security update

Multiple vulnerabilities have been found in Tor, a connection-based low-latency anonymous communication system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4054. The text itself is...

[SECURITY] [DSA 4054-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4054-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 03, 2017 https://www.debian.org/security/faq -...

CVE-2017-8819

In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion services, aka TROVE-2017-009. An attacker can send many INTRODUCE2 cells to trigger this issue...

CVE-2017-8819

CVE-2017-8819 affects Tor prior to 0.3.1.9 (and earlier branches up to 0.2.5.16, 0.2.6–0.2.8/0.2.9, 0.3.0/0.3.1) where the replay-cache protection for v2 onion services is ineffective. An attacker can inject multiple INTRODUCE2 cells to trigger a traffic-confirmation style issue, leading to poten...

NVIDIA Windows GPU Display Driver 34x.x < 342.00 / 367.x < 369.73 / 367.x < 369.71 (GRID) / 375.x < 375.63 Multiple Vulnerabilities

The version of the NVIDIA GPU display driver installed on the remote Windows host is 34x.x prior to 342.00, 367.x prior to 369.73, 367.x prior to 369.71 GRID, or 375.x prior to 375.63. It is, therefore, affected by multiple vulnerabilities : - Multiple privilege escalation vulnerabilities exist i...

Code injection

The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8819 and CVE-2014-8820...

CVE-2014-8819

Technical details about CVE-2014-8819 are not publicly provided in the supplied connected documents. Monitor for updates to obtain affected products/versions, impact, and remediation information.

mIRC IRC URL Buffer Overflow

No description provided by source. $Id: mircircurl.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora Core 11 FEDORA-2009-8819 (ocsinventory)

The remote host is missing an update to ocsinventory announced via advisory FEDORA-2009-8819. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora 11 : ocsinventory-1.02.1-3.fc11 (2009-8819)

A security issue has been found in GUI http://seclists.org/fulldisclosure/2009/Aug/0143.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

mIRC IRC URL Buffer Overflow

This module exploits a stack buffer overflow in mIRC 6.1. By submitting an overly long and specially crafted URL to the 'irc' protocol, an attacker can overwrite the buffer and control program execution. This module requires Metasploit: https://metasploit.com/download Current source:...