EulerOS 2.0 SP8 : gd (EulerOS-SA-2020-1802)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the GD Graphics Library aka LibGD through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gdtiff.c. NOTE: the vendor says 'In my...

Ubuntu: Security Advisory (USN-4435-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Magento End of Life (EOL) Detection

The Magento version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

GLSA-202007-20 : fuseiso: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-20 fuseiso: Multiple vulnerabilities Multiple vulnerabilities have been discovered in fuseiso. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a special...

GLSA-202007-21 : Libreswan: Denial of service

The remote host is affected by the vulnerability described in GLSA-202007-21 Libreswan: Denial of service As a result of a bug in handling certain bogus encrypted IKEv1, while building a log message that the packet has been dropped, a NULL pointer dereference causes Libreswan to crash and restart...

GLSA-202007-06 : HylaFAX: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-06 HylaFAX: Multiple vulnerabilities Multiple vulnerabilities have been discovered in HylaFAX. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

F5 Networks BIG-IP : FasterXML jackson-databind vulnerability (K15320518)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.2.7 / 15.0.1.4 / 15.1.0.5 / 16.0.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K15320518 advisory. - FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI...

NewStart CGSL MAIN 6.01 : memcached Vulnerability (NS-SA-2020-0033)

The remote NewStart CGSL host, running version MAIN 6.01, has memcached packages installed that are affected by a vulnerability: - In memcached before 1.5.14, a NULL pointer dereference was found in the lru mode and lru tempttl commands. This causes a denial of service when parsing crafted lru...

Treck/Kasago Network Stack Detection With IP Option.

Binary data treckipopt7.nbin...

Oracle MySQL Connectors (Jul 2020 CPU)

The 8.0.20 and prior versions of MySQL Connectors installed on the remote host are affected by a vulnerability as referenced in the July 2020 CPU advisory. A vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++ OpenSSL. Supported versions that are affected are...

Amazon Linux 2 : advancecomp (ALAS-2020-1450)

The version of advancecomp installed on the remote host is prior to 1.15-22. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1450 advisory. In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which...

Oracle Coherence (July 2020 CPU)

The version of the Oracle Coherence installed on the remote host is missing a critical patch update. It is, therefore, affected by a vulnerability, as referenced in the July 2020 Oracle CPU advisory. - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore...

MySQL Denial of Service (Jul 2020 CPU)

The version of MySQL running on the remote host is 5.7.29 and prior or 8.0.19 and prior. It is, therefore, affected by a vulnerability, as noted in the July 2020 Critical Patch Update advisory: A Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported...

Oracle Enterprise Manager Cloud Control (Jul 2020 CPU)

The 13.3.0.0, 13.4.0.0, and 12.1.0.5 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2020 CPU advisory. - Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager...

Oracle Primavera Gateway (Jul 2020 CPU)

The 16.2.0-16.2.11, 17.12.0-17.12.7, 18.8.0-18.8.9, and 19.12.0-19.12.4 versions of Primavera Gateway installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2020 CPU advisory. - Vulnerability in the Primavera Gateway product of Oracle Construction and...

Ubuntu: Security Advisory (USN-4422-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Improper Verification of Cryptographic Signature in Johnsoncontrols Exacqvision_Enterprise_Manager

Usage/Help Menu usage: CVE-2020-9047.py -h -p RPORT...

Samba 4.x < 4.10.17 / 4.11.x < 4.11.11 / 4.12.x < 4.12.4 Multiple Vulnerabilities

The version of Samba running on the remote host is 4.x prior to 4.10.17, 4.11.x prior to 4.11.11, or 4.12.x prior to 4.12.4. It is, therefore, affected by multiple vulnerabilities, including the following: - The AD DC NBT server in Samba 4.0 will enter a CPU spin and not process further requests...

Debian: Security Advisory (DSA-4720-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4418-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...