17362 matches found
Security Bulletin: A vulnerability in GNU Tar affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2019-9923)
Summary A vulnerability in GNU Tar affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data CVE-2019-9923. Please see the steps below to remediate this issue. Vulnerability Details CVEID:CVE-2019-9923 DESCRIPTION: GNU Tar is vulnerable to a denial of service, caused by a NULL point...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to information disclosure or denial of service in GNU glibc (CVE-2021-35942).
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to information disclosure and denial of service in GNU glibc, caused by a flaw when called with an untrusted, crafted pattern in thewordexp function. CVE-2021-35942. GNU glibc is used as part of the base image...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security bypass in GNU Gzip (CVE-2022-1271)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security bypass in GNU Gzip caused by improper validation of file name by the zgrep utility CVE-2022-1271. GNU Gzip and the zgrep utility are used as part of the base image included in our service component...
Security Bulletin: A vulnerability with GNU Wget affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2018-0494)
Summary A vulnerability with GNU Wget affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data CVE-2018-0494. Please see the details below on how to remediate this issue. Vulnerability Details CVEID:CVE-2018-0494 DESCRIPTION: GNU Wget could allow a remote attacker to bypass securit...
AZL-13005 CVE-2022-3515 affecting package gnupg2 for versions less than 2.4.0-1
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment...
Debian DSA-5314-1 : emacs - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5314 advisory. It was discovered that missing input sanitising in the ctags functionality of Emacs may result in the execution of arbitrary shell commands. For the stable distribution...
Fedora 36 : emacs (2022-e37f239f2e)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-e37f239f2e advisory. Update to Emacs 28.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for th...
Fedora: Security Advisory for emacs (FEDORA-2022-e37f239f2e)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
EulerOS Virtualization 2.10.1 : binutils (EulerOS-SA-2023-1142)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Assertion fail in the displaydebugnames function in binutils/dwarf.c may lead to program crash and denial of service.CVE-2022-3812...
EulerOS Virtualization 2.10.0 : binutils (EulerOS-SA-2023-1163)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Assertion fail in the displaydebugnames function in binutils/dwarf.c may lead to program crash and denial of service.CVE-2022-3812...
EulerOS Virtualization 2.9.0 : binutils (EulerOS-SA-2023-1214)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain...
phpwcms sql injection vulnerability
phpwcms is a website management system that follows the GNU open source protocol and utilizes PHP+MYSQL architecture for development. A SQL injection vulnerability exists in versions of Phpwcms before 1.9.26. An attacker can exploit this vulnerability to perform SQL injection and steal data, etc...
Huawei EulerOS: Security Advisory for libtasn1 (EulerOS-SA-2023-1013)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for emacs (FEDORA-2022-d69c7f95a4)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
EulerOS 2.0 SP9 : libtasn1 (EulerOS-SA-2023-1127)
According to the versions of the libtasn1 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU Libtasn1 before 4.19.0 has an ETYPEOK off-by-one array size check that affects asn1encodesimpleder. CVE-2021-46848 Note that Tenable Networ...
EulerOS 2.0 SP11 : libtasn1 (EulerOS-SA-2023-1013)
According to the versions of the libtasn1 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU Libtasn1 before 4.19.0 has an ETYPEOK off-by-one array size check that affects asn1encodesimpleder. CVE-2021-46848 Note that Tenable Networ...
SUSE SLES12: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / glibc-html / etc (SUSE-SU-2023:0015-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:0015-1 advisory. - CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings bsc1122729 Tenable has extracted the preceding description block directly from the SUSE...
Debian dla-3257 : emacs - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3257 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3257-1 [email protected] https://www.debian.org/lts/security/...
PT-2022-6184 · Gnu · Gnu Core Utilities
Name of the Vulnerable Software and Affected Versions: GNU Core Utilities affected versions not specified Description: The issue is related to the distribution of resources without limits or regulation in the cp utility of the GNU Core Utilities package in the EMIAS OS operating system...
