FiberHome HG6245D devices authorization issue vulnerability

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. An authorization issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to access a telnet server...

FiberHome HG6245D devices buffer overflow vulnerability

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. A buffer overflow vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to cause, for example, a buffer overflow or heap overflow...

FiberHome HG6245D devices trust management issue vulnerability (CNVD-2021-18380)

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. A trust management issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to attack vulnerable components using default passwords or hard-coded passwords,...

FiberHome HG6245D devices trust management issue vulnerability (CNVD-2021-18381)

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. A trust management issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to attack vulnerable components using default passwords or hard-coded passwords,...

FiberHome HG6245D devices default configuration issue vulnerability

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. A default configuration issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to gain access to the internal management interface...

EulerOS 2.0 SP2 : tigervnc (EulerOS-SA-2021-1369)

According to the versions of the tigervnc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. ...

NetworkManager bug fix and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

EulerOS 2.0 SP9 : python-paramiko (EulerOS-SA-2021-1272)

According to the version of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that ca...

EulerOS 2.0 SP9 : python-paramiko (EulerOS-SA-2021-1253)

According to the version of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that ca...

EulerOS 2.0 SP5 : tigervnc (EulerOS-SA-2021-1237)

According to the versions of the tigervnc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the...

EulerOS 2.0 SP3 : tigervnc (EulerOS-SA-2021-1127)

According to the versions of the tigervnc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. ...

EulerOS 2.0 SP3 : vino (EulerOS-SA-2021-1129)

According to the version of the vino package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak CWE-655 in VNC server code, which allow an attacker to read stack...

Huawei EulerOS: Security Advisory for vino (EulerOS-SA-2021-1129)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: tigervnc

Issue Overview: TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process...

Amazon Linux AMI : tigervnc (ALAS-2021-1470)

The version of tigervnc installed on the remote host is prior to 1.8.0-21.34. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1470 advisory. TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack...

Medium: tigervnc

Issue Overview: TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process...

EulerOS 2.0 SP5 : vino (EulerOS-SA-2020-2569)

According to the version of the vino package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak CWE-655 in VNC server code, which allow an attacker to read stack...

Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2020-2552)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Low: tigervnc

Issue Overview: TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process...

Oracle Linux 7 : tigervnc (ELSA-2020-3875)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3875 advisory. 1.8.0-21 - Add upstream patch needed because of previous security fixes Resolves: bz1826822 1.8.0-20 - Fix stack buffer overflow in...