13569 matches found
python: Missing salt initialization in _elementtree.c module
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by contructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...
PT-2019-6813 · Chicken +1 · Chicken +1
Name of the Vulnerable Software and Affected Versions: Chicken versions prior to 4.8.0 Description: The issue is related to algorithmic complexity attacks due to hash table collisions. Recommendations: For versions prior to 4.8.0, update to version 4.8.0 or later to resolve the issue...
Description of the security update for SharePoint Foundation 2010: May 14, 2019
Description of the security update for SharePoint Foundation 2010: May 14, 2019 Summary This security update resolves a spoofing vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To learn more abo...
KB4494351 - Description of the security update for SQL Server 2017 GDR: May 14, 2019
KB4494351 - Description of the security update for SQL Server 2017 GDR: May 14, 2019 Summary An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services if it incorrectly enforces metadata permissions. An attacker could exploit the vulnerability if the attacker's...
Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: May 14, 2019
None None...
Description of the security update for Office 2016: May 14, 2019
None None...
EulerOS Virtualization 3.0.1.0 : ruby (EulerOS-SA-2019-1428)
According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to...
Servicing stack update for Windows 10, Version 1903: May 14, 2019
None None...
EulerOS Virtualization for ARM 64 3.0.1.0 : gnutls (EulerOS-SA-2019-1388)
According to the versions of the gnutls packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote...
Design/Logic Flaw
Unauthenticated password hash disclosure in the User.getUserPWD method in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to retrieve the GUI password hashes of GUI users. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...
CVE-2019-9727
CVE-2019-9727 affects eQ-3 AG Homematic CCU3 (versions 3.43.15 and earlier). The flaw is an unauthenticated password hash disclosure in the GUI, exposed via User.getUserPWD, allowing remote attackers with access to the web interface to retrieve GUI password hashes. The vulnerability is network-ex...
CVE-2019-9727
Unauthenticated password hash disclosure in the User.getUserPWD method in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to retrieve the GUI password hashes of GUI users. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...
eQ-3 AG Homematic CCU3 Password Hash Disclosure Vulnerability
The eQ-3 AG Homematic CCU3 is a set of home automation controls from the German company eQ-3 AG. A password hash disclosure vulnerability exists in the User.getUserPWD method in eQ-3 AG Homematic CCU3 3.43.15 and earlier versions. An unauthenticated attacker accessing the web interface could use...
SOCA Access Control System 180612 - Information Disclosure
Exploit for php platform in category web applications SOCA Access Control System 180612 Information Disclosure Vendor: SOCA Technology Co., Ltd Product web page: http://www.socatech.com Affected version: 180612, 170000 and 141007 Summary: The company's products include proximity and fingerprint...
SOCA Access Control System 180612 - SQL Injection
SOCA Access Control System 180612 - SQL Injection SOCA Access Control System 180612 SQL Injection And Authentication Bypass Vendor: SOCA Technology Co., Ltd Product web page: http://www.socatech.com Affected version: 180612, 170000 and 141007 Summary: The company's products include proximity and...
Go Cryptography Libraries Cleartext Message Spoofing
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Cleartext message spoofing product: Supplementary Go Cryptography Libraries vulnerable version: commit a5d413f7728c81fb97d96a2b722368945f651e78 branch master...
EulerOS Virtualization 2.5.3 : python (EulerOS-SA-2019-1357)
According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to condu...
ABB SREA-01 and SREA-50 Ethernet Adapters Path Traversal
Binary data 720133.prm...
[SECURITY] [DLA 1778-1] symfony security update
Package : symfony Version : 2.3.21+dfsg-4+deb8u5 CVE ID : CVE-2019-10909 CVE-2019-10910 CVE-2019-10911 CVE-2019-10913 Several security vulnerabilities have been discovered in symfony, a PHP web application framework. Numerous symfony components are affected: Framework Bundle, Dependency Injection...
EulerOS 2.0 SP5 : python (EulerOS-SA-2019-1338)
According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of...