April 25, 2019—KB4493440 (OS Build 16299.1127)

None None...

April 25, 2019—KB4493443 (Preview of Monthly Rollup)

None None...

Boot failure 0xc000000f: Windows failed to load because the NLS data is missing, or corrupt

You may see this when you attempt to create App Layers after importing a new non-US-English OS layer. This applies to every version of Windows from 7 onward. Below is what you get in Windows 7 when you have a missing NLS Native Language Support code-page file. You get a boot failure screen that...

ProFTPD 1.3.1 SQL injection protection bypass

The remote host is using ProFTPD, a free FTP server for Unix and Linux. According to its banner, the version of ProFTPD installed on the remote host is 1.3.1x and may be affected by SQL injection protection bypass when NLS support is enabled. C Tenable Network Security, Inc. include'compat.inc'; ...

UNICOS 9/MAX 1.3/mk 1.5,AIX <= 4.2,libc <= 5.2.18,RedHat 4,IRIX 6,Slackware 3 NLS Vuln(1)

No description provided by source. / source: http://www.securityfocus.com/bid/711/info Cray UNICOS 9.0/9.2/MAX 1.3/mk 1.5,AIX = 4.2,Linux libc = 5.2.18,RedHat 4.0,IRIX 6.2,Slackware 3.1 Natural Language Service NLS Vulnerability 1 A buffer overflow condition affects libraries using the Natural...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2513)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2513 advisory. - wakeupprocess should be never used to wakeup a TASKSTOPPED/TRACED task Oleg Nesterov Orabug: 16405869 CVE-2013-0871 - ptrace: ensure...

kernel security and bug fix update

2.6.32-358.6.1 - virt kvm: accept unaligned MSRKVMSYSTEMTIME writes Petr Matousek 917020 917021 CVE-2013-1796 - char tty: hold lock across tty buffer finding and buffer filling Prarit Bhargava 928686 901780 - net tcp: fix for zero packetsinflight was too broad Thomas Graf 927309 920794 - net tcp:...

Oracle Database Multiple Vulnerabilities (January 2007 CPU)

The remote Oracle database server is missing the January 2007 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Advanced Queuing - Advanced Replication - Advanced Security Option - Change Data Capture - Data Guard - Export - Log Min...

CVE-2009-0543

ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in 1 modsqlmysql and 2 modsqlpostgres...

Sql injection

ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in 1 modsqlmysql and 2 modsqlpostgres...

CVE-2009-0543

ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in 1 modsqlmysql and 2 modsqlpostgres...

CVE-2009-0543

ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in 1 modsqlmysql and 2 modsqlpostgres...

CVE-2009-0543

ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in 1 modsqlmysql and 2 modsqlpostgres...

CVE-2009-0543

ProFTPD 1.3.1 with NLS support is affected by CVE-2009-0543. The vulnerability arises in handling of invalid, encoded multibyte characters in the SQL modules (mod_sql_mysql and mod_sql_postgres), allowing remote attackers to bypass SQL injection protection mechanisms. Affected components are ProF...

ProFTPD字符编码SQL注入漏洞

ProFTPD是一款流行的FTP服务程序。 ProFTPD存在漏洞，允许恶意用户进行SQL注入攻击。 在执行SQL查询之前应用程序不正确设置字符编码，在使用多字节字符编码的环境中通过注入任意SQL代码可操作SQL查询。 要成功利用漏洞需要NLS支持。 ProFTPD 1.3.x 厂商解决方案 升级到ProFTPD 1.3.2: http://www.proftpd.org...

Directory traversal

Directory traversal vulnerability in IBM Informix Dynamic Server IDS before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable...

CVE-2007-5956

Directory traversal vulnerability in IBM Informix Dynamic Server IDS before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable...

CVE-2007-5956

Directory traversal vulnerability in IBM Informix Dynamic Server IDS before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable...

IBM Informix Dynamic Server privilege escalation

Directory traversal on DBLANG environment variable parsing allows to specify attacker-controlled NLS files, leading to possibility of format string attacks for suid applications...

Horde NLS.php Language Selection new_lang Parameter XSS

The version of Horde installed on the remote host fails to sanitize input to the 'newlang' parameter before using it in the 'framework/NLS/NLS.php' script to generate dynamic content. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary HTML or script code in...