91 matches found
Ubuntu: Security Advisory (USN-4768-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
vim security update
8.0.1763-19.0.1.4 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-19.4 - fix issue reported by covscan 2:8.0.1763-19.3 - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in...
USN-4768-1: musl vulnerabilities
It was discovered that musl did not properly handle kernel syscalls. An attacker could use this vulnerability to cause a denial of service crash or possibly execute arbitrary code. CVE-2018-1000001 It was discovered that musl did not properly handle the parsing of DNS response codes. A remote...
GLSA-202007-43 : TRE: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202007-43 TRE: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TRE. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...
openSUSE Security Update : kubernetes (openSUSE-2020-554) (Dirty COW)
This update introduces kubernetes version 1.14.1 and cri-o 1.17.1 to Leap 15.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-554. The text description of this plugin is C SUSE...
ELOG < 3.1.4 DoS Vulnerability
ELOG is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elogproject:elog";...
CVE-2020-8859
CVE-2020-8859 affects ELOG Electronic Logbook 3.1.4-283534d. The flaw is in HTTP parameter processing, where a crafted request can trigger a dereference of a null pointer, allowing remote attackers to cause a denial-of-service. Exploitation is unauthenticated and over the network, with the impact...
Elog Project Denial of Service (CVE-2019-3995; CVE-2020-8859)
A denial of service vulnerability exists in Elog. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
CVE-2018-8859
CVE-2018-8859 affects Echelon SmartServer 1, SmartServer 2 (before 4.11.007) and i.LON 100; i.LON 600 is not affected. The issue allows bypassing required authentication by appending extra characters to a directory name when selecting a directory, effectively bypassing security configured in the ...
CVE-2018-8859
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can bypass the required authentication specified in the security configuration file by including extra characters in the directory name when...
postaisde.pt XSS vulnerability
Open Bug Bounty ID: OBB-637343 Description| Value ---|--- Affected Website:| postaisde.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
elseptimoarte.net XSS vulnerability
Open Bug Bounty ID: OBB-611902 Description| Value ---|--- Affected Website:| elseptimoarte.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
codes.iarc.fr XSS vulnerability
Open Bug Bounty ID: OBB-579540 Description| Value ---|--- Affected Website:| codes.iarc.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
entresaoneetsalon.fr XSS vulnerability
Open Bug Bounty ID: OBB-567289 Description| Value ---|--- Affected Website:| entresaoneetsalon.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
openSUSE Security Update : tre (openSUSE-2018-91)
This update for tre fixes one issue. This security issue was fixed : - CVE-2016-8859: Fixed multiple integer overflows which allowed attackers to cause memory corruption via a large number of 1 states or 2 tags, which triggered an out-of-bounds write boo1005483 %NASLMINLEVEL 70300 C Tenable Netwo...
10er10 (0.23.0), 10tcl (>=0.0.1, <=0.0.10) +4964 more potentially affected by CVE-2015-8859 via send (>=0.0.1, <=0.11.0)
send NPM version =0.0.1, =0.0.1, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =1.0.1, =0.25.0, =1.0.4, =1.0.6 and more Source cves: CVE-2015-8859 Source advisory: OSV:GHSA-JGQF-HWC5-HH37...
Veritas NetBackup Appliance 2.7.x / 3.0.x Remote Command Execution (VTS17-005)
According to its self-reported version, the remote Veritas NetBackup Appliance is 2.7.x or 3.0.x, and may be missing a vendor-supplied security patch. It is, therefore, affected by a remote command execution vulnerability due to improper validation of user-supplied input. An unauthenticated, remo...
CVE-2017-8859
Veritas NetBackup Appliance 2.7.x and 3.0.x are affected by a remote command execution vulnerability. An unauthenticated attacker can issue a crafted GET request (via /appliancews/getLicense with a hostName parameter) to execute arbitrary commands as root due to improper input validation. Nessus ...
