2167 matches found
Fedora: Security Advisory for weechat (FEDORA-2020-db890b4800)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 31 Update: weechat-2.7.1-1.fc31
WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...
bima.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1117089 Security Researcher g0bl1nsec Helped patch 3759 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting bima.co.uk website and it...
WAGO PFC200 Stack Buffer Overflow Vulnerability (CNVD-2020-16852)
The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. A stack buffer overflow vulnerability exists in the iocheckd service 'I/O-Check' function of the WAGO PFC200 03.02.0214. An attacker could exploit this vulnerability via a specially crafted XML cache file to achieve code...
WAGO PFC200 Command Injection Vulnerability (CNVD-2020-16848)
The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. A command injection vulnerability exists in the iocheckd service 'I/O-Check' function of the WAGO PFC200 03.02.0214. An attacker can exploit this vulnerability to inject OS commands via specially crafted XML cache files...
WAGO PFC200 Command Injection Vulnerability (CNVD-2020-16840)
The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. A command injection vulnerability exists in the iocheckd service 'I/O-Check' function of the WAGO PFC200 03.02.0214. An attacker can exploit this vulnerability to inject OS commands via specially crafted XML cache files...
Siemens SiNVR 3 SQL Injection Vulnerability
SiNVR 3 is a video management platform.Central Control Server CCS is the central control server and Video Server is the video server. SiNVR 3 has a SQL injection vulnerability in the XML-based communication protocol by default, which can be exploited by remote attackers to read or modify the...
WAGO PFC200 Stack Buffer Overflow Vulnerability (CNVD-2020-16849)
The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. A stack buffer overflow vulnerability exists in the iocheckd service 'I/O-Check' function of the WAGO PFC200 03.02.0214. An attacker could exploit this vulnerability via a specially crafted XML cache file to achieve code...
The vulnerability in the implementation of the Cisco Discovery protocol in Cisco NX-OS, Cisco FXOS, and Cisco IOS XR operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the Cisco Discovery protocol in operating systems such as Cisco NX-OS, Cisco FXOS, and Cisco IOS XR is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
ppp: Buffer overflow in the eap_request and eap_response functions in eap.c
A buffer overflow flaw was found in the ppp package in versions 2.4.2 through 2.4.8. The bounds check for the rhostname was improperly constructed in the EAP request and response functions which could allow a buffer overflow to occur. Data confidentiality and integrity, as well as system...
ppp: Buffer overflow in the eap_request and eap_response functions in eap.c
A buffer overflow flaw was found in the ppp package in versions 2.4.2 through 2.4.8. The bounds check for the rhostname was improperly constructed in the EAP request and response functions which could allow a buffer overflow to occur. Data confidentiality and integrity, as well as system...
The vulnerability of the wpa_supplicant function in the EAP hostapd server allows a hacker to induce a service failure.
The vulnerability of the wpasupplicant function in the EAP hostapd server is related to errors during the verification of the recompilation of the fragmentation fragment. Exploiting this vulnerability can allow a malicious actor to cause service failure...
reblog
Defeating a Laptop's BIOS Password We found a laptop laying a...
Debian DSA-4632-1 : ppp - security update
Ilja Van Sprundel reported a logic flaw in the Extensible Authentication Protocol EAP packet parser in the Point-to-Point Protocol Daemon pppd. An unauthenticated attacker can take advantage of this flaw to trigger a stack-based buffer overflow, leading to denial of service pppd daemon crash. C...
[SECURITY] [DSA 4632-1] ppp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4632-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 22, 2020 https://www.debian.org/security/faq -...
Cisco Meeting Server XMPP Denial of Service Vulnerability
Cisco Meeting Server is a video conferencing solution from Cisco that combines place-based video, audio, and Web communications to meet the collaboration needs of the modern workplace. A denial of service vulnerability exists in the Extensible Messaging and Status Protocol XMPP feature in Cisco...
SOS JobScheduler JOC Cockpit XML External Entity Vulnerability
Cockpit is an interactive server management interface. An XML External Entity XEE vulnerability exists in the SOS JobScheduler JOC Cockpit. An attacker can exploit this vulnerability to read files from the server via entity declarations in any XML document used to specify runtime settings for job...
[SECURITY] Fedora 31 Update: xar-1.8.0.417.1-1.fc31
The XAR project aims to provide an easily extensible archive format. Import ant design decisions include an easily extensible XML table of contents for ran dom access to archived files, storing the toc at the beginning of the archive to allow for efficient handling of streamed archives, the abili...
GHSA-R6J9-8759-G62W Improper Restriction of XML External Entity Reference in jackson-mapper-asl
A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar to CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes...