MiracleLinux 8 : sqlite-3.26.0-18.el8 (AXSA:2023-6185:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6185:03 advisory. sqlite: Crash due to misuse of window functions. CVE-2020-24736 Tenable has extracted the preceding description block directly from the MiracleLinux security...

Linux Distros Unpatched Vulnerability : CVE-2020-15586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a...

CVE-2020-2674

creationtimestamp| type| source ---|---|--- 2023-11-29 11:55:01+00:00| seen| https://t.me/arpsyndicate/728...

SUSE CVE-2020-2674

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

SUSE CVE-2020-18974

Buffer Overflow in Netwide Assembler NASM v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is different than CVE-2019-7147...

Sourcecodester Hotel and Lodge Management System 2.0 - SQL Injection

Sourcecodester Hotel and Lodge Management System 2.0 contains a SQL injection vulnerability via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...

Django SQL Injection

Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allow SQL injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it is possible to break characte...

CVE-2020-5003

creationtimestamp| type| source ---|---|--- 2021-06-11 18:43:00+00:00| seen| https://t.me/cibsecurity/25388...

CVE-2020-19107

creationtimestamp| type| source ---|---|--- 2021-05-07 17:47:38+00:00| published-proof-of-concept| Telegram/EWwqc90uDPIVCuLTRuFoZeTawiT-jxdJCFqrX24ZWYzlmJo...

Exploit for Path Traversal in Gitlab

GitLab CVE2020-10977 Introduction This script provides re...

WordPress Contact Form 7 - Unrestricted File Upload

WordPress Contact Form 7 before 5.3.2 allows unrestricted file upload and remote code execution because a filename may contain special characters. id: CVE-2020-35489 info: name: WordPress Contact Form 7 - Unrestricted File Upload author: soyelmago severity: critical description: WordPress Contact...

OESA-2021-1037 gssproxy security update

This is a proxy for GSSAPI which deals with credential handling.\r\n\r\n Security Fixes:\r\n\r\n DISPUTED gssproxy aka gss-proxy before 0.8.3 does not unlock condmutex before pthread exit in gpworkermain in gpworkers.c. NOTE: An upstream comment states "We are already on a shutdown path when...

xstream security update

CentOS Errata and Security Advisory CESA-2021:0162 An update for xstream is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2020-25686

creationtimestamp| type| source ---|---|--- 2021-01-20 11:02:54+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/dnspooq-haavoittuvuusjoukko-laajalti-kaytossa-olevassa-dnsmasq-ohjelmistossa 2021-01-20 18:46:29+00:00| seen| https://t.me/VulnerabilityNews/19766 2021-01-20 20:27:21+00:00| seen...

CVE-2020-0471

In reassembleanddispatch of packetfragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution...

CVE-2020-35610

creationtimestamp| type| source ---|---|--- 2020-12-28 22:28:56+00:00| seen| https://t.me/cibsecurity/21367...

CVE-2020-17021

creationtimestamp| type| source ---|---|--- 2020-11-11 12:35:06+00:00| seen| https://t.me/cibsecurity/16151 2020-11-11 12:35:14+00:00| seen| https://t.me/cibsecurity/16159...

UBUNTU-CVE-2020-15974

Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page...

DEBIAN-CVE-2020-14779

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

UBUNTU-CVE-2020-6542

Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...