3304 matches found
Solaris 10 (x86) : 148769-02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Text Utilities. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized read...
Solaris 10 (sparc) : 119254-91
SunOS 5.10: Install and Patch Utilities Pa. Date this patch was last updated by Sun : Feb/23/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Solaris 10 (sparc) : 152264-01
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Utilities. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via RPC to compromise Solaris. Successful attacks of this...
Solaris 10 (sparc) : 148768-02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Text Utilities. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized read...
Solaris 10 (x86) : 119255-92
SunOS 5.10x86: Install and Patch Utilities Patch. Date this patch was last updated by Sun : Jun/11/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; ...
Denial of service vulnerability in GNU binutils 'display_debug_ranges' function
GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. A denial of service vulnerability exis...
Etherpad Lite Cross-Site Scripting Vulnerability
Etherpad Lite is the Etherpad Foundation's suite of open source rich text online collaboration software. A cross-site scripting vulnerability exists in the static/js/padutils.js file in Etherpad Lite versions prior to 1.6.3. A remote attacker can use window.location.href to inject arbitrary Web...
GNU Binutils Denial of Service Vulnerability (CNVD-2018-05207)
GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A denial of service vulnerability exists in GNU Binutils 2.30. The vulnerability arises because the coffpointerizeaux function in coffgen.c in the...
Debian DLA-1281-1 : advancecomp security update
Joonun Jang discovered that the advzip tool in advancecomp, a collection of recompression utilities, was prone to a heap-based buffer overflow. This might allow an attacker to cause a denial of service application crash or other unspecified impact via a crafted file. For Debian 7 'Wheezy', these...
February 9, 2018 – Morning Cyber Coffee Headlines – “Opening Ceremony” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! February 9, 2018 - Headlines Carbon Black in the News: 10 Questions Today’s CEO...
CVE-2018-6767
An out-of-bounds stack buffer read flaw was found in WavPack. This flaw could potentially be used to crash WavPack CLI utilities by tricking them into processing specially crafted WAVE files...
Unbit uWSGI Stack Buffer Overflow Vulnerability
Unbit uWSGI is a set of open source application server that supports multiple languages . A stack buffer overflow vulnerability exists in the 'uwsgiexpandpath' function in the core/utils.c file in Unbit uWSGI 2.0.15 and earlier. An attacker can exploit this vulnerability to cause stack corruption...
GNU Binutils 'bfd_get_debug_link_info_1' Function Denial of Service Vulnerability
GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...
UBUNTU-CVE-2018-6759
The bfdgetdebuglinkinfo1 function in opncls.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service segmentation fault via a crafted ELF file...
[SECURITY] Fedora 27 Update: coreutils-8.27-19.fc27
These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages...
Node.js third-party modules: Prototype pollution attack (Hoek)
As discussed in 309391, here's the separate report for each of the library. This one is the information for the Hoek library. Module: hoek Summary: Utilities function in all the listed modules can be tricked into modify the prototype of "Object" when the attacker control part of the structure...
OWASP Top 10 2017 is Released
The Journey to the New and Improved Ten Most Critical Web Application Security Risks It was not too long ago that protecting your web server infrastructure consisted of simply placing the servers in their own zone behind the firewall and just opening a couple of ports. Outside of endpoint...
UBUNTU-CVE-2017-1000487
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings...