3776 matches found
Fedora 28 : curl (2018-57779d51c1)
fix heap buffer overflow in SMTP send CVE-2018-0500 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2018:2423-1)
This update for curl fixes the following issues: Security issue fixed : - CVE-2018-0500: Fix a SMTP send heap buffer overflow bsc1099793. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...
CVE-2018-18772
CentOS-WebPanel.com aka CWP CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=sendssh, as demonstrated by executing an arbitrary OS command...
CVE-2018-18772
CentOS-WebPanel.com aka CWP CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=sendssh, as demonstrated by executing an arbitrary OS command...
CVE-2018-0682
Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier does not properly manage sessions, which allows remote attackers to read/send mail or change the configuration via unspecified vectors...
Hardcoded credentials
Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier uses hard-coded credentials, which may allow remote attackers to read/send mail or change the configuration...
CVE-2018-0680
Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier uses hard-coded credentials, which may allow remote attackers to read/send mail or change the configuration...
CVE-2018-0682: Undefined Security Weakness
Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier does not properly manage sessions, which allows remote attackers to read/send mail or change the configuration via unspecified vectors...
CentOS Web Panel Cross-Site Request Forgery Vulnerability (CNVD-2019-18498)
CentOS Web Panel is a CentOS Lnuix system administration panel. A cross-site request forgery vulnerability exists in CentOS Web Panel 0.9.8.740 and earlier versions, which can be exploited by a remote attacker to modify the server's root password and execute commands with the help of...
Apache Tomcat 8.5.x < 8.5.13 Multiple Vulnerabilities
According to its self-reported version number, the Apache Tomcat service running on the remote host is 8.5.x prior to 8.5.13. It is therefore affected by multiple vulnerabilities : - A flaw exists in the handling of pipelined requests when send file processing is used that results in the pipeline...
Microsoft Office: Send personal information
This test checks the setting for policy OpenVAS Vulnerability Test $Id: officesendpersonalinformation.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Send personal information Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program ...
Moderate severity vulnerability that affects send
Withdrawn, accidental duplicate publish. visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public"...
GHSA-PGV6-JRVV-75JP Moderate severity vulnerability that affects send
Withdrawn, accidental duplicate publish. visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public"...
Tcpreplay Buffer Overflow Vulnerability
Tcpreplay is a set of open source utilities for editing and replaying network traffic for UNIX based operating systems. A buffer overflow vulnerability exists in the 'fasteditpacket' function of the sendpackets.c file in Tcpreplay version 4.3. An attacker can exploit this vulnerability with a...
PT-2018-14067
Name of the Vulnerable Software and Affected Versions Tcpreplay version 4.3.0 beta1 Description A heap-based buffer over-read exists in the fast edit packet function, located in the send packets.c file. This issue can lead to Denial of Service DoS and potentially Information Exposure when the...
CVE-2018-15667
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. It registers and uses the airmail:// URL scheme. The "send" command in the URL scheme allows an external application to send arbitrary emails from an active account without authentication. The handler has no restriction on who can use it...
CVE-2018-15668
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the "send" command with the "attachment" prefix designate attachment parameters. If the...
PT-2018-13129
Name of the Vulnerable Software and Affected Versions Bloop Airmail 3 version 3.5.9 Description An issue in the "send" command of the airmail:// URL scheme allows external applications to send arbitrary emails from an active account without user prompt. The command accepts URL parameters with the...
CVE-2018-15668: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the "send" command with the "attachment" prefix designate attachment parameters. If the...