1826 matches found
VulnCheck KEV: CVE-2023-52163
Digiever DS-2105 Pro contains a missing authorization vulnerability which could allow for command injection via timetzsetup.cgi...
MAL-2024-11251 Malicious code in @neo-ds/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb7303825f9830a20957d406c7a1b9193816b17c907592e4fa1e8a6fa48c61e3 The OpenSSF Package Analysis project identified '@neo-ds/components' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...
Malicious code in @neo-ds/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb7303825f9830a20957d406c7a1b9193816b17c907592e4fa1e8a6fa48c61e3 The OpenSSF Package Analysis project identified '@neo-ds/components' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...
CVE-2024-11576
Luxion KeyShot 3DS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visi...
Fedora 41 : 389-ds-base (2024-48c0a7fa73)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-48c0a7fa73 advisory. Automatic update for 389-ds-base-3.1.1-1.fc41. Changelog Tue Jul 30 2024 Viktor Ashirov - 3.1.1-1 - Update to 3.1.1 - Resolves: CVE-2024-1062...
RHEL 8 : redhat-ds:11 (RHSA-2024:6576)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6576 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...
SUSE SLES15 / openSUSE 15 Security Update : 389-ds (SUSE-SU-2024:3843-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3843-1 advisory. - Persist extracted key path for ldapsslclientinit over repeat invocations bsc1230852 - Re-enable use of .dsrc basedn...
openSUSE: Security Advisory for 389 (SUSE-SU-2024:3843-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for 389 (SUSE-SU-2024:3844-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 / openSUSE 15 Security Update : 389-ds (SUSE-SU-2024:3844-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3844-1 advisory. - Persist extracted key path for ldapsslclientinit over repeat invocations bsc1230852 - Re-enable use of .dsrc basedn...
SUSE-SU-2024:3843-1 Security update for 389-ds
This update for 389-ds fixes the following issues: - Persist extracted key path for ldapsslclientinit over repeat invocations bsc1230852 - Re-enable use of .dsrc basedn for dsidm commands bsc1231462 - Update to version 2.2.10git18.20ce9289: RFE: Use previously extracted key path Update dsidm to...
Client Management System SQL注入漏洞
Client Management System is a system for managing customer relationships by an individual Indian developer Haneen Gufran. A security vulnerability exists in Client Management System version 1.0 that originates from SQL injection in the Between Dates Reports parameter of the...
389-ds-base security update
1.3.11.1-5.0.3 - Security fix for CVE-2024-8445 Orabug: 37119399CVE-2024-8445...
Oracle Linux 7 : 389-ds-base (ELSA-2024-7434)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-7434 advisory. 1.3.11.1-5.0.3 - Security fix for CVE-2024-8445 Orabug: 37119399CVE-2024-8445 Tenable has extracted the preceding description block directly from the Oracle Lin...
Advisory ROSA-SA-2024-2505
SOFTWARE: 389-ds-base 1.4.3.8 OS: ROSA Virtualization 2.1 packageevrstring: 389-ds-base-1.4.3.8-5.0.2.rv3 CVE-ID: CVE-2020-35518 BDU-ID: 2023-02645 CVE-Crit: MEDIUM CVE-DESC.: A 389 Directory Server authentication vulnerability involves information disclosure when verifying the existence of a...
The vulnerability of the Message Handler component in Hikvision’s microprogrammed IP cameras DS-7604NI-K1/4P(B) allows a intruder to trigger a service failure.
The vulnerability of the Message Handler component in Hikvision’s DS-7604NI-K1/4PB microprogrammed software cameras is related to the handling of the zero pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the Message Handler component in the DS-7604NXI-K1/4P microprogramming system for IP cameras allows a intruder to disclose protected information or cause a malfunction in the service.
The vulnerability of the Message Handler component in the DS-7604NXI-K1/4P microprogramming system for IP cameras involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause malfunctions in the...
RHSA-2024:7458 Red Hat Security Advisory: redhat-ds:12 security update
Bulletin has no description...