13603 matches found
Security Bulletin: Multiple vulnerabilities have been identified in Netty shipped with IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library (CVE-2019-20445, CVE-2019-20444)
Summary Netty is a dependency component shipped with the IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library for Message Bus Integration. Information about security vulnerabilities affecting Netty has been published. CVE-2019-20445, CVE-2019-20444 Vulnerability Details CVEID:...
CVE-2018-20334
creationtimestamp| type| source ---|---|--- 2020-03-20 06:32:20+00:00| seen| https://t.me/cibsecurity/10642 2025-05-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-05-15 2026-06-23 14:06:20+00:00| exploited|...
Hancom Office HwordApp.dll Library tfo_common Component Resource Management Error Vulnerability
Hancom Office is a mobile office program from the Korean company Hancom. The program supports viewing and editing documents in many formats. hncbd90 is one of the hncbd90 libraries. A resource management error vulnerability exists in the tfocommon component of the HwordApp.dll library in Hancom...
CVE-2019-16338
The tfocommon component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file...
ICU: Integer overflow in UnicodeString::doAppend()
An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...
Security Bulletin: Information Disclosure in Cognos Business Intelligence (Cognos BI) shipped with Tivoli Common Reporting (CVE-2019-1547, CVE-2019-1549, CVE-2019-1563)
Summary IBM Tivoli Common Reporting TCR interim fixes address Security Vulnerabilities CVE-2019-1547, CVE-2019-1549, CVE-2019-1563 Vulnerability Details CVEID: CVE-2019-1547 DESCRIPTION: OpenSSL could allow a local authenticated attacker to obtain sensitive information, caused by the ability to...
CVE-2017-12842
creationtimestamp| type| source ---|---|--- 2020-03-16 23:46:04+00:00| seen| https://t.me/cibsecurity/10532 2026-04-10 18:26:02+00:00| seen| https://gist.github.com/motolese/14f6c5a8151e9fb449829e58444e63c4...
DEBIAN-CVE-2016-1000111
Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect a CGI application's outbou...
CVE-2020-0551
creationtimestamp| type| source ---|---|--- 2020-03-10 18:19:39+00:00| seen| https://t.me/thehackernews/632 2020-12-20 21:57:56+00:00| seen| https://t.me/CyberSecurityTechnologies/775 2024-10-10 02:42:11+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/774...
Improper LDAPS Certificate Validation in Hitachi Ops Center Common Services
Overview Improper certificate validation in Hitachi Ops Center Common Services. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...
CVE-2017-1000020
creationtimestamp| type| source ---|---|--- 2020-02-27 08:20:18+00:00| seen| https://t.me/VulnerabilityNews/12770...
CVE-2020-9054
creationtimestamp| type| source ---|---|--- 2020-02-26 10:20:27+00:00| published-proof-of-concept| https://t.me/truesecator/218 2020-02-26 12:10:02+00:00| exploited| https://t.me/xakepru/8765 2020-02-27 09:12:31+00:00| seen|...
The vulnerability of the pg_ctlcluster script in the postgresql-common package allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise the integrity of the data.
The vulnerability of the pgctlcluster script in the postgresql-common package relates to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...
CentOS 7 : openjpeg2 (RHSA-2020:0550)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0550 advisory. - opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than...
The vulnerabilities of the pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts from the postgresql-common package can be exploited by attackers to compromise the integrity of data in PostgreSQL database management systems.
The vulnerability of the pgctlcluster, pgcreatecluster, and pgupgradecluster scripts from the postgresql-common package is related to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...
Gadgetinspector - A Byte Code Analyzer For Finding Deserialization Gadget Chains In Java Applications
This project inspects Java libraries and classpaths for gadget chains. Gadgets chains are used to construct exploits for deserialization vulnerabilities. By automatically discovering possible gadgets chains in an application's classpath penetration testers can quickly construct exploits and...
CVE-2012-1093
The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation...
CVE-2012-1093
The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation...
DEBIAN-CVE-2012-1093
The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation...
Privilege escalation
The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation...