EulerOS 2.0 SP9 : libvorbis (EulerOS-SA-2021-2274)

According to the versions of the libvorbis packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.CVE-2018-10393 - The barknoisehybridmp function in...

EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2021-2253)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 8.1.1 allows attackers to cause a denial of service memory consumption because the reported size of a contained image is not...

Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2021-2274)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2279)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : libvorbis (EulerOS-SA-2021-2248)

According to the versions of the libvorbis packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.CVE-2018-10393 - The barknoisehybridmp function in...

Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2021-2248)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4948-1 : aspell - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4948 advisory. A buffer overflow was discovered in the Aspell spell checker, which could result in the execution of arbitrary code. For the stable distribution buster, these...

Best Practices to Thwart Business Email Compromise (BEC) Attacks

Business email compromise BEC refers to all types of email attacks that do not have payloads. Although there are numerous types, there are essentially two main mechanisms through which attackers penetrate organizations utilizing BEC techniques, spoofing and account take-over attacks. In a recent...

Denial Of Service (DoS)

Artifex MuPDF is vulnerable to denial of service. It has a heap based buffer over-write in tiffexpandcolormap function when parsing TIFF files allowing attackers to cause a denial of service...

Denial Of Service

hdf5 is vulnerable to denial of service. There is a heap-based buffer over-read in the function H5Olayoutdecode in H5Olayout.c, related to HDmemcpy...

Arbitrary Code Execution

hdf5 is vulnerable to arbtirary code execution. A heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c allows an attacker to execute arbitrary code on the host OS...

Denial Of Service (DoS)

hdf5 is vulnerable to denial of service. A heap-based buffer over-read in H5Oattrdecode in H5Oattr.c allows attackers to cause crash the application via a malicious HDF5 file...

Information Disclosure

hdf5 is vulnerable to information disclosure. The vulnerability exists due to a heap-based buffer over-read in the function H5Olinkdecode in H5Olink.c...

Debian DLA-2716-1 : pillow - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2716 advisory. - In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer...

CVE-2020-19490

CVE-2020-19490 affects tinyexr 0.9.5. The vulnerability is an integer overflow overwrite in tinyexr::DecodePixelData defined in tinyexr.h, related to OpenEXR code. The connected documents do not provide explicit impact details, and no remediation patch/version is stated in the provided data.

CVE-2021-2447

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Server. The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Secure Global Deskto...

CVE-2021-2382

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Security. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3,...

CVE-2020-19609

Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiffexpandcolormap function when parsing TIFF files allowing attackers to cause a denial of service...

CVE-2020-19609

Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiffexpandcolormap function when parsing TIFF files allowing attackers to cause a denial of service...

CVE-2020-19609

Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiffexpandcolormap function when parsing TIFF files allowing attackers to cause a denial of service...