1058 matches found
Deserialization of untrusted data
DISPUTED Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a crafted settings.pickle file in a project file, because there is insecure deserialization via the pickle.load function in settings.py. NOTE: the vendor's position is that the product is not intended for...
CVE-2021-35196
Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a crafted settings.pickle file in a project file, because there is insecure deserialization via the pickle.load function in settings.py. NOTE: the vendor's position is that the product is not intended for opening an...
VulnCheck KEV: CVE-2017-1000253
Linux kernel contains a position-independent executable PIE stack buffer corruption vulnerability in loadelf binary that allows a local attacker to escalate privileges...
SUSE: Security Advisory (SUSE-SU-2021:1010-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM position could spoof the contents of an XML document describing an update package, replacing a download URL with one pointing to an arbitrary Windows executable. Because the only...
CVE-2021-22747
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique...
CVE-2021-22747
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique...
CVE-2021-22743
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position...
openSUSE Security Update : drbd-utils (openSUSE-2021-724)
This update for drbd-utils fixes the following issues : - make all binaries in position independent bsc1185132. This update was imported from the SUSE:SLE-15-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
OPENSUSE-SU-2021:0750-1 Security update for ibsim
This update for ibsim fixes the following issues: - Hardening: link as position independent executable bsc1184123. This update was imported from the SUSE:SLE-15-SP2:Update update project...
Security update for ibsim (low)
openSUSE Security Update: Security update for ibsim Announcement ID: openSUSE-SU-2021:0750-1 Rating: low References: 1184123 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for ibsim fixes the following issues: - Hardenin...
OPENSUSE-SU-2021:0746-1 Security update for dtc
This update for dtc fixes the following issues: - make all packaged binaries PIE-executables bsc1184122. This update was imported from the SUSE:SLE-15-SP2:Update update project...
OPENSUSE-SU-2021:0745-1 Security update for ipvsadm
This update for ipvsadm fixes the following issues: - Hardening: link as position independent executable bsc1184988. This update was imported from the SUSE:SLE-15:Update update project...
OPENSUSE-SU-2021:0724-1 Security update for drbd-utils
This update for drbd-utils fixes the following issues: - make all binaries in position independent bsc1185132. This update was imported from the SUSE:SLE-15-SP2:Update update project...
SUSE-SU-2021:1606-1 Security update for ibsim
This update for ibsim fixes the following issues: - Hardening: link as position independent executable bsc1184123...
Security update for drbd-utils (low)
openSUSE Security Update: Security update for drbd-utils Announcement ID: openSUSE-SU-2021:0724-1 Rating: low References: 1185132 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for drbd-utils fixes the following issues: ...
SUSE-SU-2021:1599-1 Security update for ipvsadm
This update for ipvsadm fixes the following issues: - Hardening: link as position independent executable bsc1184988...
SUSE-SU-2021:1598-1 Security update for dtc
This update for dtc fixes the following issues: - make all packaged binaries PIE-executables bsc1184122...
Omron CX-One CX-Position NCI File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...