5544 matches found
Denial Of Service
krb5is vulnerable to denial of service. The vulnerability exists because lib/krb5/asn.1/asn1encode.c support for indefinite length allows for an unbounded recursion...
CVE-2020-13638
lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7...
CVE-2020-13638: Improper Privilege Management
lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7...
PT-2020-13629
Name of the Vulnerable Software and Affected Versions rConfig versions 3.9.x through 3.9.6 Description The issue is related to an authentication bypass in the lib/crud/userprocess.php file, which can lead to the creation of administrator accounts. Recommendations For versions 3.9.x through 3.9.6,...
Server side request forgery (ssrf)
The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF...
In Python 3 through 3.9.0 the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
...
CVE-2020-24063: Server-Side Request Forgery (SSRF)
The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF...
PT-2020-15635
Name of the Vulnerable Software and Affected Versions Canto plugin version 1.3.0 for WordPress Description The issue allows for Server-Side Request Forgery SSRF via the "includes/lib/download.php" endpoint with the subdomain parameter. Recommendations For Canto plugin version 1.3.0, consider...
Arbitrary File Read
jsreport-chrome-pdf is vulnerable to arbitrary file read. An attacker can send malicious requests via lib/conversion.js to read arbitrary local files...
EulerOS Virtualization 3.0.6.6 : python-ipaddress (EulerOS-SA-2020-2472)
According to the version of the python-ipaddress package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes,...
Arbitrary File Read
Overview jsreport-chrome-pdf is a Affected versions of this package are vulnerable to Arbitrary File Read. An Arbitrary File Read vulnerability exists in lib/conversion.js. PoC document.writewindow.location='../../../../../etc/passwd' Remediation Upgrade jsreport-chrome-pdf to version 1.10.0 or...
Huawei EulerOS: Security Advisory for python (EulerOS-SA-2020-2471)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
new module: perl:5.30
An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...
EulerOS 2.0 SP9 : python-ipaddress (EulerOS-SA-2020-2420)
According to the version of the python-ipaddress package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow...
openSUSE Security Update : samba (openSUSE-2020-1819)
This update for samba fixes the following issues : Update to samba 4.11.14 - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records bsc1177613. - CVE-2020-14323: Unprivileged user can crash winbind bsc1173994. - CVE-2020-14318: Missing permissions check in...
Security update for samba (important)
openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2020:1819-1 Rating: important References: 1173902 1173994 1177613 Cross-References: CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities is now...
CVE-2020-27678
An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There is a buffer overflow in parseusername in lib/libpam/pamframework.c...
PT-2020-16762
Name of the Vulnerable Software and Affected Versions illumos versions prior to 2020-10-22 OmniOS versions prior to r151030by, r151032ay, and r151034y SmartOS versions prior to 20201022 Description An issue was discovered in the affected software, which is related to a buffer overflow in the pars...
