CVE-2014-3445

CVE-2014-3445 describes an authentication bypass in HandsomeWeb SOS Webpages prior to 1.1.12. The vulnerability resides in backup.php, which allows an unauthenticated user to perform administrative backups and potentially disclose the administrator password hash by manipulating the MD5-based key ...

CVE-2014-3445

backup.php in HandsomeWeb SOS Webpages before 1.1.12 does not require knowledge of the cleartext password, which allows remote attackers to bypass authentication by leveraging knowledge of the administrator password hash...

PT-2020-7646

Name of the Vulnerable Software and Affected Versions HandsomeWeb SOS Webpages versions prior to 1.1.12 Description The issue allows remote attackers to bypass authentication by leveraging knowledge of the administrator password hash, as the backup.php file does not require knowledge of the...

CVE-2014-3445: Insufficiently Protected Credentials

backup.php in HandsomeWeb SOS Webpages before 1.1.12 does not require knowledge of the cleartext password, which allows remote attackers to bypass authentication by leveraging knowledge of the administrator password hash...

Fedora Update for sos-collector FEDORA-2018-672c028631

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2019-5409

Name of the Vulnerable Software and Affected Versions FFmpeg versions 4.1 through 4.2.2 Description The issue is related to a heap-based buffer overflow in the cbs jpeg split fragment function during JPEG MARKER SOS handling due to a missing length check. This can lead to a denial of service. The...

Information Disclosure

sos-collector is vulnerable to information disclosure. Incorrect permissions set on new files created by the sos-collector in /var/tmp directory allows a local attacker to access the files and retrieve confidential information...

Sensitive Information Leakage

The sos package has a sensitive information leakage vulnerability. During archival of debugging information, the package does not remove the root user password information stored in the Kickstart configuration file /root/anaconda-ks.cfg it leaves the root user password information from the...

Fedora 29 : sos-collector (2018-672c028631)

Update to new 1.5 release. Resolves CVE-2018-14650 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : sos-collector (2018-1f3a47bfbb)

Update to new 1.5 release. Resolves CVE-2018-14650 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CentOS Update for sos-collector CESA-2018:3663 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : sos-collector (CESA-2018:3663)

An update for sos-collector is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

sos security update

CentOS Errata and Security Advisory CESA-2018:3663 An update for sos-collector is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

sos-plzen.cz XSS vulnerability

Open Bug Bounty ID: OBB-708451 Description| Value ---|--- Affected Website:| sos-plzen.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

Oracle Linux 7 : sos-collector (ELSA-2018-3663)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-3663 advisory. 1.5-3.0.1 - To recognize OL systemOraBug 28807430 - import os module to detect /etc/redhat-release OraBug 28740046 1.5-3 - Resolve race condition in cluster...

sos-collector security update

1.5-3.0.1 - To recognize OL systemOraBug 28807430 - import os module to detect /etc/redhat-release OraBug 28740046 1.5-3 - Resolve race condition in cluster profile loading - Quote all options globally - RHBZ1633515 - RHBZ1647955 1.5-2 - Fix cluster option reporting 1.5-1 - Update to version 1.5 ...

Scientific Linux Security Update : sos-collector on SL7.x (noarch) (20181127)

The following packages have been upgraded to a later upstream version: sos-collector 1.5. Security Fixes : - sos-collector: incorrect permissions set on newly created files CVE-2018-14650 This issue was discovered by Riccardo Schirone Red Hat Product Security. C Tenable Network Security, Inc. The...

Moderate: Red Hat Security Advisory: sos-collector security update

An update for sos-collector is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

sos-collector: incorrect permissions set on newly created files

It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the...

RHEL 7 : sos-collector (RHSA-2018:3663)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:3663 advisory. sos-collector is a utility that gathers sosreports from multi-node environments. sos-collector facilitates data collection for support cases and it c...