32679 matches found
Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-paramiko) security update
An update for python-paramiko is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...
Remote Code Execution (RCE)
3f/pygmentize is vulnerable to Remote Code Execution. The vulnerability is due to improper shell argument sanitization when passing user input to the PIGMENTS binary, which allows an attacker to cause Remote Code Execution...
JetBrains TeamCity Server Installed (Windows)
Binary data jetbrainsteamcitywininstalled.nbin...
CHAOS 5.0.8 Cross Site Scripting / Remote Command Execution Exploit
CHAOS version 5.0.8 is a free and open-source Remote Administration Tool that allows generated binaries to control remote operating systems. The web application contains a remote command execution vulnerability which can be triggered by an authenticated user when generating a new executable. The...
RHEL 8 : Red Hat OpenStack Platform 17.1 (python-paramiko) (RHSA-2024:2768)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2768 advisory. Paramiko, a combination of the esperanto words for paranoid and friend, is a module for python 2.3 or greater that implements the SSH2 protocol for...
UBUNTU-CVE-2023-52781
In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usbgetbosdescriptor' The BOS descriptor defines a root descriptor and is the base descriptor for accessing a family of related descriptors. Function 'usbgetbosdescriptor' encounters an iterati...
Stable Structures 安全漏洞
Stable Structures is a collection of data structures open-sourced by DFINITY. A security vulnerability exists in Stable Structures versions prior to 0.6.0, which stems from a memory issue in BTreeMap when releasing an overflow node, which could lead to using too much memory or even running out of...
Fluent Bit Detection
Binary data fluentbitdetect.nbin...
Progress Telerik Reporting Installed (Windows)
Binary data progresstelerikreportingwininstalled.nbin...
CyberPower Power Device Network Utility Detection
Binary data cyberpowerpdnudetect.nbin...
The vulnerabilities of the FortiOS command-line interpreter, the FortiSwitchManager local management platform, and the FortiProxy proxy server for protecting against internet attacks allow attackers to execute arbitrary code.
The vulnerability of the FortiOS command-line interpreter, the local management platform FortiSwitchManager, and the FortiProxy proxy server for protecting against Internet attacks is related to the use of uncontrolled format strings in processing binary files. Exploiting this vulnerability allow...
The vulnerability of the command-line interface of FortiOS operating systems allows a hacker to execute arbitrary code by sending specially crafted requests.
The vulnerability of the command-line interface of FortiOS operating systems is related to the use of uncontrolled format lines when processing binary files. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted requests...
CyberPower Power Device Network Utility Missing Authentication (CVE-2024-32735)
Binary data cyberpowerpdnucve-2024-32735.nbin...
CVE-2023-46842
Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit-mode hypercall arguments to values outside of the range 32-bit code would be able to set them to. When processing of hypercalls takes a...
Apache Superset Web Interface Detection
Binary data apachesupersetwebdetect.nbin...
Fortra FileCatalyst Workflow Path Traversal (CVE-2024-25153)
Binary data fortrafilecatalystworkflowcve-2024-25153.nbin...
Yealink Device Management Platform Pre-authentication Remote Command Injection (CVE-2021-27561)
Binary data yealinkdevicemanagementplatformCVE-2021-27561.nbin...