17019 matches found
Low: Red Hat Security Advisory: curl security and bug fix update
An update for curl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
[SECURITY] Fedora 29 Update: gvfs-1.38.3-1.fc29
The gvfs package provides backend implementations for the gio framework in GLib. It includes ftp, sftp, cifs...
Fedora Update for gvfs FEDORA-2019-e6b02af8b8
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora Update for proftpd FEDORA-2019-e9187610c3
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora Update for proftpd FEDORA-2019-82b0f48691
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Malicious Package
node-ftp is a malicious package. When the package is installed or required, the package attempts to send hostname information to the attacker's server, affecting confidentiality of the victim's server which can potentially bridges to other attack vectors like remote code execution...
CVE-2016-10813
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
Design/Logic Flaw
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
CVE-2016-10813
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
CVE-2016-10813
CVE-2016-10813 affects cPanel prior to 57.9999.54, where an input handling flaw during FTP account creation under addon domains allows self-XSS. Root cause: insufficient input validation in the addon domains FTP creation flow. Impact: client-side script execution under the victim’s browser; no se...
CVE-2016-10834
cPanel before 55.9999.141 allows account-suspension bypass via ftp SEC-105...
CVE-2016-10832
cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging SEC-102...
CVE-2016-10832
cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging SEC-102...
Authentication flaw
cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging SEC-102...
Design/Logic Flaw
cPanel before 55.9999.141 allows account-suspension bypass via ftp SEC-105...
CVE-2016-10832
cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging SEC-102...
CVE-2016-10832
CVE-2016-10832 affects cPanel prior to 55.9999.141. The vulnerability is an FTP cPHulk bypass via account name munging (SEC-102), enabling bypass of FTP authentication checks. Root cause: improper handling during the cPHulk workflow allows bypass when munging the account name. Impact: potential u...
CVE-2016-10834
CVE-2016-10834 affects cPanel versions before 55.9999.141, where an account-suspension could be bypassed via FTP (SEC-105). Concrete details across sources confirm the vulnerability exists in cPanel and that remediation is to upgrade to 55.9999.141 or later. The Red Hat/NVD entries corroborate th...