38617 matches found
Ubuntu 16.04 LTS / 18.04 LTS : unzip vulnerabilities (USN-4672-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4672-1 advisory. Rene Freingruber discovered that unzip incorrectly handled certain specially crafted password protected ZIP archives. If a user or automated...
Moderate: Red Hat Security Advisory: gd security update
An update for gd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Huawei EulerOS: Security Advisory for perl-DBD-MySQL (EulerOS-SA-2020-2558)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Scientific Linux Security Update : gd on SL7.x i686/x86_64 (2020:5443)
The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5443-1 advisory. - gd: Integer overflow in gd2GetHeader resulting in heap overflow CVE-2016-5766 Note that Nessus has not tested for this issue but has instead relied only...
EulerOS 2.0 SP5 : perl-DBD-MySQL (EulerOS-SA-2020-2558)
According to the version of the perl-DBD-MySQL package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - There is a vulnerability of type use-after-free affecting DBD::mysql aka DBD-mysql or the Database Interface DBI MySQL driver for Perl 3.x a...
NewStart CGSL CORE 5.05 / MAIN 5.05 : doxygen Vulnerability (NS-SA-2020-0107)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has doxygen packages installed that are affected by a vulnerability: - Insufficient sanitization of the query parameter in templates/html/searchopensearch.php could lead to reflected cross-site scripting or iframe injection...
SUSE SLES12 Security Update : jasper (SUSE-SU-2020:2690-1)
This update for jasper fixes the following issues : CVE-2016-9398: Improved patch for already fixed issue bsc1010979. CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. CVE-2016-9397: Fix assert in jpcdequantize bsc1010786. CVE-2016-9557: Fix signed integer overflow bsc1011829. CVE-2017-5499:...
SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2020:2689-1)
This update for jasper fixes the following issues : CVE-2016-9398: Improved patch for already fixed issue bsc1010979. CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. CVE-2017-5499: Validate component depth bit bsc1020451. CVE-2017-5503: Check bounds in jasseq2dbindsub bsc1020456...
SonicWall Secure Remote Access Server Command Injection (CVE-2016-9682)
A command injection vulnerability exists in SonicWall Secure Remote Access server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Sonicwall Secure Remote Access Server Command Injection (CVE-2016-9684)
A command injection vulnerability exists in SonicWall Secure Remote Access server. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Exploit for Race Condition in Canonical Ubuntu_Linux
This is a PoC exploit for CVE-2016-5195, also known as the Dirty Cow vulnerability. The exploit targets Linux systems and uses the Dirty Cow vulnerability to gain root access. The vulnerability allows an attacker to write to a read-only page in memory, which can be used to execute arbitrary code...
Microsoft Windows Server Privilege Escalation (CVE-2016-0095)
A privilege escalation vulnerability exists in Microsoft Windows Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Microsoft Windows Server Privilege Escalation (CVE-2016-0007)
A privilege escalation vulnerability exists in Microsoft Windows Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Moxa AWK-3131A Cross-Site Scripting (CVE-2016-8719)
A cross-site scripting vulnerability exists in Moxa AWK-3131A. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
CVE-2016-2781 affecting package coreutils 8.30-12
CVE-2016-2781 affecting package coreutils 8.30-12. A patched version of the package is available...
AntennaHouse DMC HTMLFilter Memory Corruption (CVE-2016-8383)
A remote code execution vulnerability exists in AntennaHouse DMC HTMLFilter. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Oracle E-Business Suite HR Component Multiple Vulnerabilities (CVE-2016-0517)
A vulnerability exists in Oracle E-Business Suite. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Microsoft Windows Privilege Escalation (CVE-2016-0070)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Debian: Security Advisory (DLA-2461-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...