17598 matches found
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 7.3 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Linux kernel IP fragment re-assembly vulnerable to denial of service
Overview The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets. Description CWE-400: Uncontrolled Resource Consumption 'Resource Exhaustion' - CVE-2018-5391The Linux kernel, versions 3.9+, is vulnerable to a...
Node.js third-party modules: [samsung-remote] Command injection
I would like to report a command injection vulnerability in the samsung-remote npm module. It allows arbitrary shell command execution through a maliciously crafted argument. Module module name: samsung-remote version: 1.2.5 npm page: https://www.npmjs.com/package/samsung-remote Module Descriptio...
Fuxi-Scanner
This is an open-source network security vulnerability scanner called Fuxi-Scanner. It is a Python-based tool that provides multiple security functions, including vulnerability detection and management, authentication testing, IT asset discovery and management, port scanning, subdomain scanning, a...
Network and System Reconnaissance Tool: Sandmap
Sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine . It provides a user-friendly interface, automates and speeds up scanning and allows you to easily use many advanced scanning techniques. Key Features simple CLI with the ability to run pure Nmap engine...
Node.js third-party modules: [egg-scripts] Command injection
I would like to report a command injection vulnerability in egg-scripts. It allows arbitrary shell command execution through a maliciously crafted command line argument. Module module name: egg-scripts version: 2.6.0 npm page: https://www.npmjs.com/package/egg-scripts Module Description "deploy...
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in GNU C Library
Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in GNU C Library. Vulnerability Details CVEID: CVE-2018-6551 DESCRIPTION: GNU glibc could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow in the malloc...
CVE-2018-13796
An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site...
GNU Mailman <= 2.1.26 XSS Vulnerability
Mailman is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gnu:mailman";...
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by a vulnerability in GNU C Library (CVE-2017-12133)
Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in GNU C Library. Vulnerability Details CVEID: CVE-2017-12133 DESCRIPTION: GNU C Library aka glibc or libc6 could allow a remote attacker to conduct spoofing attacks, caused by a flaw in the DNS stub...
Security Bulletin: IBM QRadar Network Security is affected by a GNU Compiler Collection (GCC) vulnerability
Summary IBM QRadar Network Security has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2017-11671 DESCRIPTION: GNU Compiler Collection GCC could provide weaker than expected security, caused by a flaw in the ix86expandbuiltin function in i386.c. A remote attacker could...
Double free
dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...
CVE-2018-14524
dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...
CVE-2018-14524
dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...
CVE-2018-14524
dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...
CVE-2018-14524
CVE-2018-14524 affects GNU LibreDWG prior to 0.6, with a double-free in dwg_free_eed due to improper management of obj->eed after free during dwg_decode_eed. Affected component: LibreDWG (C library for DWG handling). Root cause: freeing obj->eed without proper reinitialization/handling. Imp...
GNU LibreDWG 'dwg_free_eed' function double release vulnerability
GNU LibreDWG is a C language library developed by the GNU Project for working with DWG files. A security vulnerability exists in the 'dwgfreeeed' function of the free.c file in GNU LibreDWG version 0.5.1048, which stems from the program's failure to properly manage the obj-eed value after a relea...
CVE-2018-14471
dwgobjblockcontrolgetblockheaders in dwgapi.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service NULL pointer dereference and SEGV via a crafted dwg file...