Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2023-1228)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2023-1198)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ASUS RT-AX82U Denial of Service Vulnerability

The ASUS RT-AX82U is a wireless router from the Chinese company ASUS. A denial of service vulnerability exists in ASUS RT-AX82U version 3.0.0.4.38649674-ge182230, which stems from improper input validation of the cfgserver cmprocessConnDiagPktList opcode of the router configuration service, which...

RHEL 8 : libtiff (RHSA-2023:0095)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0095 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: LibTiff: DoS from...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1196)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-46372: Improper Input Validation

Alotcer - AR7088H-A firmware version 16.10.3 Command execution Improper validation of unspecified input field may allow Authenticated command execution...

Oracle Linux 8 : libtiff (ELSA-2023-0095)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0095 advisory. - Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 CVE-2022-2953 - Fix CVE-2022-2867 2118857 - Fix CVE-2022-2868 2118882 - Fix CVE-2022-2869 2118878...

Design/Logic Flaw

Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service...

CVE-2023-22952: Improper Input Validation

In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation...

Adobe Acrobat < 20.005.30436 / 22.003.20310 Multiple Vulnerabilities (APSB23-01) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 20.005.30436 or 22.003.20310. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected ...

CVE-2023-22963: Improper Input Validation

The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^0000-9$ regular expression...

Adobe InDesign < 17.4.1 / 18.0 < 18.1.0 Multiple Vulnerabilities (APSB23-07) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 17.4.1, 18.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-07 advisory. - Adobe InDesign version 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds write...

Adobe InCopy < 17.4.1 / 18.0 < 18.1.0 Multiple Vulnerabilities (APSB23-08)

The version of Adobe InCopy installed on the remote host is prior to 17.4.1, 18.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-08 advisory. - Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds write vulnerability that...

Adobe Acrobat < 20.005.30436 / 22.003.20310 Multiple Vulnerabilities (APSB23-01)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 20.005.30436 or 22.003.20310. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affecte...

Adobe Reader < 20.005.30436 / 22.003.20310 Multiple Vulnerabilities (APSB23-01) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30436 or 22.003.20310. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected b...

CVE-2022-4428: Improper Input Validation

supporturi parameter in the WARP client local settings file mdm.xml lacked proper validation which allowed for privilege escalation and launching an arbitrary executable on the local machine upon clicking on the "Send feedback" option. An attacker with access to the local file system could use a...

EulerOS Virtualization 2.9.1 : libtiff (EulerOS-SA-2023-1196)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a...

CVE-2021-46767: Improper Input Validation

Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading to a loss of integrity or denial of service...

CVE-2023-21767: Improper Input Validation

Windows Overlay Filter Elevation of Privilege Vulnerability...

EulerOS Virtualization 2.9.0 : libtiff (EulerOS-SA-2023-1226)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a...