Security Bulletin: Vulnerability in OpenSSH affects IBM i (CVE-2016-8858)

Summary OpenSSH vulnerability affects IBM i. IBM i has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2016-8858 DESCRIPTION: OpenSSH is vulnerable to a denial of service, caused by an error in the kexinputkexinit function. By sending specially crafted data during the key exchange...

EulerOS 2.0 SP3 : subversion (EulerOS-SA-2019-2669)

According to the versions of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Apache Subversion's moddontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-servic...

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

CVE-2019-7481

SonicWall SMA100 is affected by CVE-2019-7481, an information-disclosure vulnerability that allows unauthenticated attackers to gain read-only access to unauthorized resources. The vulnerability impacts SMA100 versions up to and including 9.0.0.3 (and earlier per the CVE description). Reported CV...

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

SonicWall SMA100 Authenticated SQL injection

Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier. CVE: CVE-2019-7484 Last updated: March 6, 2020, 4:42 a.m...

CVE-2012-2237

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 javascript innerHTML as used when generating login forms, 2 links or 3 resources URLs, and 4 the Display nam...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 javascript innerHTML as used when generating login forms, 2 links or 3 resources URLs, and 4 the Display nam...

Various Jira Server setup resources are vulnerable to XSRF/CSRF - CVE-2019-20401

Various installation setup resources in Jira before version 8.5.2 allow remote attackers to configure a Jira instance, which has not yet finished being installed, via Cross-site request forgery CSRF vulnerabilities. Once a Jira instance is setup i.e. database, admin account, licence, etc. form ar...

Samsung J7 Neo Access Control Error Vulnerability (CNVD-2020-14679)

Samsung J7 Neo is a smartphone from Samsung South Korea. The Samsung J7 Neo build fingerprint: samsung/j7veltedx/j7velte:8.1.0/M1AJQ/J701FXVS6BSC1:user/release-keys in the com.samsung.android. An access control error vulnerability exists in the themecenter app. The vulnerability stems from the...

FreeBSD : spamassassin -- multiple vulnerabilities (70111759-1dae-11ea-966a-206a8a720317)

the Apache Spamassassin project reports : An input validation error of user-supplied input parsing multipart emails. Specially crafted emails can consume all resources on the system. A local user is able to execute arbitrary shell commands through specially crafted nefarious CF files. C Tenable...

Cisco IOS XE Software Simple Network Management Protocol Double-Free DoS (cisco-sa-20180328-snmp-dos)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Simple Network Management Protocol SNMP subsystem due to improper management of memory resources, referred to as a double free. An authenticated, remote attacker can exploit...

The vulnerability of the ReadXBMImage function in the cross-platform library for working with GraphicsMagick allows a hacker to induce a service failure.

The vulnerability of the ReadXBMImage function in the cross-platform library for working with GraphicsMagick is related to the exhaustion of resources on the central processor. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2019-12420

In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly...

CVE-2019-12420

In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly...

CVE-2019-18377

Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

Symantec Norton Password Manager Access Control Error Vulnerability

Symantec Norton Password Manager is a password management application from Symantec USA. An access control error vulnerability exists in Symantec Norton Password Manager versions prior to 6.6.2.5, which can be exploited by an attacker to request restricted cross-domain resources...

Symantec Norton Password Manager Access Control Error Vulnerability (CNVD-2020-09627)

Symantec Norton Password Manager is a password management application from Symantec USA. An access control error vulnerability exists in Symantec Norton Password Manager versions prior to 6.6.2.5, which can be exploited by an attacker to request restricted cross-domain resources...