357 matches found
CVE-2020-17541
A stack-based buffer overflow flaw was found in libjpeg-turbo library in the tranform component. An attacker may use this flaw to input a malicious image file to an application utilizing this library, leading to arbitrary code execution. The highest threat from this vulnerability is to data...
CVE-2020-26146
A vulnerability was found in Linux kernel, where the WiFi implementation reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented frames and the WEP, CCMP, or GCMP...
Photon OS 3.0: Mysql PHSA-2021-3.0-0231
An update of the mysql package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0231. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...
F5 Networks BIG-IP : cURL vulnerability (K41523201)
The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.4.1 / 14.1.4.2 / 15.1.4 / 16.0.1.2 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K41523201 advisory. Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to...
CVE-2021-3506
An out-of-bounds OOB memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this...
Fedora 33 : xorg-x11-server (2021-139f3fc21c)
The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-139f3fc21c advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network...
Unified Dashboard Preview for Enhanced Security Visualization
Qualys has introduced the Unified Dashboard Framework UDF to enrich your dashboarding experience. Unified Dashboard UD brings information from all Qualys applications into a single place for visualization. UD adds a powerful new dashboarding framework to the Qualys Cloud Platform that will be...
KB5001263: Setup Dynamic Update for Windows 10, version 2004 and 20H2: March 9, 2021
None None...
Fedora 33 : dotnet3.1 (2021-c3d7fc8949)
The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-c3d7fc8949 advisory. - .NET Core and Visual Studio Denial of Service Vulnerability CVE-2021-1721 - .NET Core Remote Code Execution Vulnerability This CVE ID is unique fr...
CVE-2020-12364
Null pointer reference in some IntelR Graphics Drivers for Microsoft Windows and the Linux kernel may allow a privileged user to potentially enable a denial of service via local access. Mitigation Mitigation for this issue is either not available or the currently available options dont meet the R...
Buyer's Guide for Securing Internal Environment with a Small Cybersecurity Team
Ensuring the cybersecurity of your internal environment when you have a small security team is challenging. If you want to maintain the highest security level with a small team, your strategy has to be 'do more with less,' and with the right technology, you can leverage your team and protect your...
CVE-2021-20177
A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user with root or CAPNETADMIN when inserting iptables rules could insert a rule which can panic the system. Mitigation Mitigation for this issue is either not available or the currently availabl...
CVE-2020-35492
A flaw was found in cairo's image-compositor.c. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untrusted input to cause a stack buffer...
Debian DSA-4817-1 : php-pear - security update
Two vulnerabilities were discovered in the PEAR ArchiveTar package for handling tar files in PHP, potentially allowing a remote attacker to execute arbitrary code or overwrite files. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
openSUSE Security Update : xen (openSUSE-2020-2192)
This update for xen fixes the following issues : - bsc1178963 - VUL-0: xen: stack corruption from XSA-346 change XSA-355 This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
PowerPoint 2003/2007/2010 Silent Builder Exploit
The exploit allows you to convert EXE & JAR to .PPS its coded 100% from scratch and used by private method to assure a great stability and lasting FUD time. You are able to attach it to the most e-mail providers nowadays everyone uses Microsoft Office so it gives a huge chance of success. This...
Photon OS 3.0: Linux PHSA-2020-3.0-0142
An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0142. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140708;...
Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200908)
Security Fixes : - Mozilla: Attacker-induced prompt for extension installation CVE-2020-15664 - Mozilla: Use-After-Free when aborting an operation CVE-2020-15669 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid140440;...
CVE-2020-16288
A buffer overflow vulnerability in pjcommonprintpage in devices/gdevpjet.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Mitigation Mitigation for this issue is either not available or the currently...