49 matches found
CentOS 7 : bcel (RHSA-2022:8958)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8958 advisory. - Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issu...
SUSE CVE-2015-8958
coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted SUN file...
Important: Red Hat Security Advisory: bcel security update
An update for bcel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Oracle Linux 7 : bcel (ELSA-2022-8958)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8958 advisory. 0:5.2-19 - Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920 Tenable has extracted the preceding description block directly...
CVE-2020-8958
Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field...
CVE-2020-8958
CVE-2020-8958 affects Guangzhou 1GE ONU V2801RW and V2804RGW devices (firmware 1.9.1-181203 through 2.9.0-181024). The flaw allows remote OS command execution via shell metacharacters in Boaform/admin/formPing Dest IP Address, caused by unvalidated input in that field. Public evidence links this ...
Exploit for OS Command Injection in Gpononu 1Ge_Router_Wifi_Onu_V2801Rw_Firmware
A proof of concept for CVE-2020-8958 written in Python. The scri...
devcpa.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1129312 Security Researcher geeknik Helped patch 8958 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting devcpa.com website and its...
kellysbar.se Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1034574 Security Researcher geeknik Helped patch 8958 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting kellysbar.se website and i...
quijost.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-932747 Security Researcher geeknik Helped patch 8958 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting quijost.com website and its...
CVE-2018-8958
creationtimestamp| type| source ---|---|--- 2018-06-13 08:59:26+00:00| seen| https://t.me/cKure/74...
CVE-2017-8958
Summary: CVE-2017-8958 corresponds to a remote code execution vulnerability in Hewlett Packard Enterprise (HPE) Intelligent Management Center (iMC) PLAT. Affected software: iMC PLAT version 7.3 E0504P04 and earlier (as stated across multiple sources). Impact as described: The vulnerability allows...
Fedora Update for techne FEDORA-2017-8f27031c8f
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-8958
coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted SUN file...
CVE-2015-8958
ImageMagick contains a vulnerability CVE-2015-8958 in the SUN file handling path (coders/sun.c) affecting versions before 6.9.0-4 Beta. The issue is an out-of-bounds read that can crash the application via a crafted SUN file, enabling remote denial of service. This CVE is documented in multiple f...
SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2016:2964-1)
This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8862: Memory allocation failure in...
openSUSE Security Update : ImageMagick (openSUSE-2016-1282)
This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...
openSUSE Security Update : ImageMagick (openSUSE-2016-1242)
This update for ImageMagick fixes the following issues : - CVE-2016-8684: Mismatch between real filesize and header values bsc1005123 - CVE-2016-8683: Check that filesize is reasonable compared to the header value bsc1005127 - CVE-2016-8682: Stack-buffer read overflow while reading SCT header...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2667-1)
This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...
CVE-2015-8958
coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted SUN file...