4261 matches found
WS-2020-0351
openSC in versions 0.12.2-rc1 to 0.20.0 is vulnerable toHeap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...
WS-2020-0347
nDPI in versions 3.2 is vulnerable to Stack-buffer-overflow in ndpisearchkerberos, related to src/lib/protocols/kerberos.c...
PT-2020-21946
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash occurs in the rnp key store kbx from src function, which...
PT-2020-21949
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read crash has been reported. The crash state includes mem src read, src peek, and src eof. Recommendations At the moment, there is ...
Medium: python34, python35, python36
Issue Overview: Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or...
PT-2020-6631
Name of the Vulnerable Software and Affected Versions libsolv versions prior to 0.7.17 Description The issue is related to a buffer overflow vulnerability in the pool installable function of the src/repo.h component in the Libsolv library. This vulnerability can be exploited by a remote attacker ...
PT-2021-17636
Name of the Vulnerable Software and Affected Versions: JasPer Image Coding Toolkit version 2.0 Description: A Divide-by-zero issue exists in the JasPer Image Coding Toolkit, specifically in the jasper/src/libjasper/jpc/jpc enc.c file. Recommendations: For JasPer Image Coding Toolkit version 2.0, ...
Medium: python-rsa
Issue Overview: Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior...
openSUSE Security Update : rust / rust-cbindgen (openSUSE-2020-933)
This update for rust, rust-cbindgen fixes the following issues : - Updated openssl-src to 1.1.1g for CVE-2020-1967. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-933. The text description of this...
openSUSE Security Update : rust / rust-cbindgen (openSUSE-2020-945)
This update for rust, rust-cbindgen fixes the following issues : - Updated openssl-src to 1.1.1g for CVE-2020-1967. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-945. The text description of this...
openSUSE: Security Advisory for rust, (openSUSE-SU-2020:0933-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for rust, rust-cbindgen (moderate)
openSUSE Security Update: Security update for rust, rust-cbindgen Announcement ID: openSUSE-SU-2020:0945-1 Rating: moderate References: 1115645 1154817 1173202 Cross-References: CVE-2020-1967 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has two fixes is now...
Cisco UCS Director Cloupia Script Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco UCS Director Cloupia Script RCE', 'Description' = %q This module exploits an authentication bypass and directory traversals in Cisco UCS...
WS-2020-0365
nDPI in versions 1.6 to 3.0 is vulnerable to Heap-buffer-overflow in ndpicheckspotify , related to src/lib/protocols/spotify.c...
PT-2020-12440
Name of the Vulnerable Software and Affected Versions Centreon host-monitoring widget versions prior to 1.6.4, 18.10.3, 19.04.3, and 19.0.1 Centreon service-monitoring widget versions prior to 1.6.4, 18.10.5, 19.04.3, and 19.10.2 Centreon tactical-overview widget versions prior to 1.0.3, 18.10.1,...
WS-2020-0361
PcapPlusPlus in versions 17.11 to 19.12 is vulnerable to Heap-buffer-overflow in pcpp::HeaderField::HeaderField, related to Packet++/src/TextBasedProtocol.cpp...
WS-2020-0394
PcapPlusPlus in versions v16.09 to v19.12 is vulnerable to Use-of-uninitialized-value in pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage, related to Packet++/src/SSLHandshake.cpp...
WS-2020-0391
PcapPlusPlus in versions v17.11 to v19.12 is vulnerable to heap-buffer-overflow in pcpp::tbpmyownstrnlen, related to Packet++/src/TextBasedProtocol.cpp...