38612 matches found
CVE-2016-15038
NUUO NVRmini 2 (up to 3.0.8) has a path traversal vulnerability in an unknown function of /deletefile.php. Manipulating the filename parameter enables traversal, and remote access is possible. The vulnerability is documented with public exploit references in the provided sources; no remediation d...
CVE-2016-2781 affecting package coreutils for versions less than 9.4-1
CVE-2016-2781 affecting package coreutils for versions less than 9.4-1. A patched version of the package is available...
CVE-2016-9844 affecting package unzip for versions less than 6.0-20
CVE-2016-9844 affecting package unzip for versions less than 6.0-20. A patched version of the package is available...
CVE-2016-9296 affecting package p7zip for versions less than 16.02-23
CVE-2016-9296 affecting package p7zip for versions less than 16.02-23. A patched version of the package is available...
Cisco IP Phones 8800 Series Cross-Site Scripting (CVE-2016-1476)
Cross-site scripting XSS vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024. This plugin only works with Tenable.ot. Please visit...
Cisco 8800 Series IP Phone Filesystem Permission Enforcement Unauthorized Access (CVE-2016-1435)
Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot fo...
Cisco IP 8800 Series Phones btcli Utility Command Injection (CVE-2016-1403)
CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID CSCuz03005. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...
Cisco IP Phones 8800 Series Denial of Service (CVE-2016-1479)
Cisco IP Phone 8800 devices with software 11.01 allow remote attackers to cause a denial of service memory corruption via a crafted HTTP request, aka Bug ID CSCuz03038. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Debian dla-3762 : unadf - security update
The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3762 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3762-1 [email protected]...
EulerOS 2.0 SP8 : motif (EulerOS-SA-2024-1283)
According to the versions of the motif packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers t...
openSUSE: Security Advisory for dnsdist (SUSE-SU-2023:2760-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for guile1, lilypond (openSUSE-SU-2023:0137-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-1000110
creationtimestamp| type| source ---|---|--- 2024-02-28 17:47:07+00:00| seen| https://t.me/ctinow/195691...
CVE-2016-3131
creationtimestamp| type| source ---|---|--- 2024-02-28 10:41:10+00:00| seen| https://t.me/ctinow/195305...
CVE-2016-1552
Technical details for CVE-2016-1552 are not publicly available in the provided documents. The connected Nessus/Ubuntu entries indicate an unpatched status but do not specify affected products, root cause, or fixes. Monitor for updates.
Medium: python-pillow
Issue Overview: Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service crash via a crafted FLI file. CVE-2016-0775 Affected Packages: python-pillow Note: This advisory is applicable to Amazon Linux 2 A...
Medium: python-pillow
Issue Overview: Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service crash via a crafted FLI file. CVE-2016-0775 Affected Packages: python-pillow Note: This advisory is applicable to Amazon Linux 2 A...
Security Bulletin: IBM Sterling Control Center vulnerable to denial of service due to Spring Boot and remote code execution due to Spring Framework
Summary IBM Sterling Control Center containerized image uses VMWare Tanzu Spring Boot and Pivotal Spring Framework. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-20883 DESCRIPTION: VMware Tanzu Spring Boot is vulnerable to a denial...