100 matches found
Debian dla-3639 : distro-info-data - security update
The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3639 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3639-1 [email protected] https://www.debian.org/lts/security/...
DLA-3639-1 distro-info-data - database update
Bulletin has no description...
Design/Logic Flaw
Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cache of user sessions. Upon a cache-miss,...
PT-2023-8436
Name of the Vulnerable Software and Affected Versions Shim versions prior to 15.8 Description A remote code execution vulnerability was found in Shim, a core component of secure boot in Linux. The vulnerability allows an attacker to craft a specific malicious HTTP request, leading to a completely...
CLSA-2023-1688068314 mysql: Fix of 37 CVEs
Update to MySQL 8.0.32 - CVEs fixed: CVE-2023-21912 CVE-2022-21594 CVE-2022-21599 CVE-2022-21604 CVE-2022-21608 CVE-2022-21611 CVE-2022-21617 CVE-2022-21625 CVE-2022-21632 CVE-2022-21633 CVE-2022-21637 CVE-2022-21640 CVE-2022-39400 CVE-2022-39408 CVE-2022-39410 CVE-2023-21836 CVE-2023-21863...
[SECURITY] [DLA 3411-1] distro-info-data database update
Debian LTS Advisory DLA-3411-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera April 30, 2023 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.41+deb10u7 This is a routine update of the distro-info-data database for Debian LTS users. It includes t...
File (Field) Paths - Moderately critical - Access bypass - SA-CONTRIB-2022-065
The File Field Paths module extends the default functionality of Drupal's core File module, by adding the ability to use entity-based tokens in destination paths and file names. The module's default configuration could temporarily expose private files to anonymous visitors. Important note: to fix...
[SECURITY] [DLA 3171-1] distro-info-data database update
Debian LTS Advisory DLA-3171-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 30, 2022 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.41+deb10u6 This is a routine update of the distro-info-data database for Debian LTS users. It includes...
Debian dla-3171 : distro-info-data - security update
The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3171 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3171-1 [email protected] https://www.debian.org/lts/security/...
DLA-3171-1 distro-info-data - database update
Bulletin has no description...
Cisco Small Business RV160 Database Update Code Execution
The vulnerability of the database update function in Cisco Small Business RV160, RV260, RV340, and RV345 router microprogramming systems lies in errors in processing input data. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges remotely...
Copyright Proof <= 4.16 - Reflected Cross-Site-Scripting
The plugin does not sanitise and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting when a specific setting is enabled. To make it easier to verify the vulnerability without the nee...
PT-2021-4799
Name of the Vulnerable Software and Affected Versions NETGEAR R6400v2 version 1.0.4.106 NETGEAR R6700 version 1.0.2.16 NETGEAR R6700v3 version 1.0.4.106 NETGEAR R6900 version 1.0.2.16 NETGEAR R6900P version 1.3.2.134 NETGEAR R7000 version 1.0.11.123 NETGEAR R7000P version 1.3.2.134 NETGEAR R7850...
database update module of Code Execution
The vulnerability of the Active Business Process Automation Module of LOCsMAN WorkFlow Audit Service is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to execute arbitrary code by replacing the dll library e.g., msimg32.dll in the...
database update module of Code Execution
The vulnerability of the database update module of the LOCsman:PLM engineering data and product lifecycle management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to execute arbitrary code by replacing the wsock32.dll library with...
PT-2021-3204
Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to an unlimited file upload vulnerability in the database update module of the WorkFlow system, which can allow an attacker to execute arbitrary code by replacing the...
Number withdrawn
This CVE number has been withdrawn...
Updated APN database entry for Transatel (France, Worldwide) network for Windows 8.1 and Windows 8
Updated APN database entry for Transatel France, Worldwide network for Windows 8.1 and Windows 8 This article describes an update for the Transatel France, Worldwide network in Windows 8.1, Windows RT 8.1, Windows 8, and Windows RT. Before you apply this update, you should be aware that this upda...
OPENSUSE-SU-2019:2551-1 Security update for ncurses
This update for ncurses fixes the following issues: Security issues fixed: - CVE-2019-17594: Fixed a heap-based buffer over-read in the ncfindentry function bsc1154036. - CVE-2019-17595: Fixed a heap-based buffer over-read in the fmtentry function bsc1154037. Non-security issue fixed: - Removed...
Circle with Disney Database Updater Code Execution Vulnerability(CVE-2017-2883)
Summary An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to execute arbitrary code. An attacker needs to impersonate a remote server in order to trigger this vulnerability...