MiracleLinux 8 : sqlite-3.26.0-18.el8 (AXSA:2023-6185:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6185:03 advisory. sqlite: Crash due to misuse of window functions. CVE-2020-24736 Tenable has extracted the preceding description block directly from the MiracleLinux security...

Linux Distros Unpatched Vulnerability : CVE-2020-15586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a...

CVE-2020-2674

creationtimestamp| type| source ---|---|--- 2023-11-29 11:55:01+00:00| seen| https://t.me/arpsyndicate/728...

SUSE CVE-2020-2674

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

SUSE CVE-2020-18974

Buffer Overflow in Netwide Assembler NASM v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is different than CVE-2019-7147...

Sourcecodester Hotel and Lodge Management System 2.0 - SQL Injection

Sourcecodester Hotel and Lodge Management System 2.0 contains a SQL injection vulnerability via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1591 more potentially affected by CVE-2020-2101 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.20)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2020-2101 Source advisory: OSV:GHSA-W7JR-WQW6-54XC...

Django SQL Injection

Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allow SQL injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it is possible to break characte...

CVE-2020-5003

creationtimestamp| type| source ---|---|--- 2021-06-11 18:43:00+00:00| seen| https://t.me/cibsecurity/25388...

CVE-2020-19107

creationtimestamp| type| source ---|---|--- 2021-05-07 17:47:38+00:00| published-proof-of-concept| Telegram/EWwqc90uDPIVCuLTRuFoZeTawiT-jxdJCFqrX24ZWYzlmJo...

Exploit for Path Traversal in Gitlab

GitLab CVE2020-10977 Introduction This script provides re...

WordPress Contact Form 7 - Unrestricted File Upload

WordPress Contact Form 7 before 5.3.2 allows unrestricted file upload and remote code execution because a filename may contain special characters. id: CVE-2020-35489 info: name: WordPress Contact Form 7 - Unrestricted File Upload author: soyelmago severity: critical description: WordPress Contact...

OESA-2021-1037 gssproxy security update

This is a proxy for GSSAPI which deals with credential handling.\r\n\r\n Security Fixes:\r\n\r\n DISPUTED gssproxy aka gss-proxy before 0.8.3 does not unlock condmutex before pthread exit in gpworkermain in gpworkers.c. NOTE: An upstream comment states "We are already on a shutdown path when...

2keys (=0.5.1), 3di-cmd-client (>=0.0.1a0 <=0.0.3) +2029 more potentially affected by CVE-2020-14343 via pyyaml (>=3.10.0 <=5.3.1)

pyyaml PYPI version =3.10.0, =0.0.1a0, =0.1.0, =1.0.0, =1.5.0, =3.0.0, =0.0.0, =0.1.0, =0.5.6, =1.9.0, =1.0.0, =1.2.8 and more Source cves: CVE-2020-14343 Source advisory: OSV:PYSEC-2021-142...

xstream security update

CentOS Errata and Security Advisory CESA-2021:0162 An update for xstream is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2020-25686

creationtimestamp| type| source ---|---|--- 2021-01-20 11:02:54+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/dnspooq-haavoittuvuusjoukko-laajalti-kaytossa-olevassa-dnsmasq-ohjelmistossa 2021-01-20 18:46:29+00:00| seen| https://t.me/VulnerabilityNews/19766 2021-01-20 20:27:21+00:00| seen...

CVE-2020-0471

In reassembleanddispatch of packetfragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution...

CVE-2020-35610

creationtimestamp| type| source ---|---|--- 2020-12-28 22:28:56+00:00| seen| https://t.me/cibsecurity/21367...

pycnet-audio (>=0.5.1 <=0.5.8) potentially affected by CVE-2020-26268 via tensorflow-cpu (=2.2.0)

tensorflow-cpu PYPI version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - pycnet-audio =0.5.1, =0.5.8 Source cves: CVE-2020-26268 Source advisory: OSV:PYSEC-2020-299...

azureml-designer-recommender-modules (>=0.0.1 <=0.0.9), koncept (=0.2.1) +10 more potentially affected by CVE-2020-26270 via tensorflow-gpu (>=2.0.0 <=2.0.3)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.9 - koncept =0.2.1 - monk-cuda100 =0.0.1 - monk-cuda100-test =0.0.1 - monk-cuda101 =0.0.1 - monk-cuda101-test =0.0.1 - monk-keras-cuda100 =0.0.1 - monk-keras-cuda100-test =0.0.1 - monk-keras-cuda101 =0.0.1 - monk-keras-cuda101-test =0.0.1 -...