ARP Spoofing in Zingbox Inspector

A security vulnerability exists in Zingbox Inspector that allows for the Inspector to be susceptible to ARP spoofing. Ref: CVE-2019-15022 The vulnerability allows for an attacker to perform ARP spoofing attacks against the Zingbox Inspector. This issue affects Zingbox Inspector, versions 1.294 an...

PT-2019-3610 · Zingbox · Zingbox Inspector

Name of the Vulnerable Software and Affected Versions: Zingbox Inspector versions 1.294 and earlier Description: A security issue exists due to the lack of protection against ARP spoofing, allowing a remote attacker to potentially elevate their privileges. The issue makes the Inspector susceptibl...

EulerOS 2.0 SP3 : mod_auth_mellon (EulerOS-SA-2019-2009)

According to the versions of the modauthmellon package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The amreadpostdata function in modauthmellon before 0.11.1 does not check if the apgetclientblock function returns an error, which allows...

EulerOS 2.0 SP3 : qt (EulerOS-SA-2019-2012)

According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.CVE-2018-19869 Note that Tenable...

EulerOS 2.0 SP5 : qemu-kvm (EulerOS-SA-2019-1988)

According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the pxa2xxsspload function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or...

EulerOS 2.0 SP5 : patch (EulerOS-SA-2019-1982)

According to the versions of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.CVE-2015-1196 - GNU patch 2.7.2 and earli...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CentOS Update for bpftool CESA-2019:2600 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : pcre (EulerOS-SA-2019-1931)

According to the version of the pcre packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violatio...

MGASA-2019-0272 Updated thunderbird packages fix security vulnerabilities

This update provides an update to thunderbird 68.0, updates enigmail to 2.1.2 and fixes the following security issues: Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and Thunderbird 68. CVE-2019-11709 Memory safety bugs fixed in Firefox 68 and Thunderbird 68. CVE-2019-11710 Script...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2019-16088

Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc...

Denial Of Service (DoS)

numpy is vulnerable to denial of service. A segmentation fault occurs when einsum is called with mixed subscripts, causing the application to crash. Note that an attacker could potentially obtain arbitrary code execution from the resulting segmentation fault...

Denial Of Service (DoS)

numpy is vulnerable to denial of service DoS. Saving large arrays as csv causes a segmentation fault when it is executing with GCC 8.2.0 on python 3.6.7. Note that an attacker could potentially obtain arbitrary code execution from the resulting segmentation fault...

Denial Of Service (DoS)

numpy is vulnerable to denial of service DoS. The invocation of pickle.load on pickled void objects results in a crash. Note that an attacker could potentially obtain arbitrary code execution from the resulting segmentation fault...

Denial Of Service (DoS)

numpy is vulnerable to denial of service. A crash occurs when np.flat is indexed with an empty tuple. Note that an attacker could potentially obtain arbitrary code execution from the resulting segmentation fault...

Denial Of Service (DoS)

numpy is vulnerable to Denial Of Service DoS. A crash occurs in numpy.f2py when calling complex valued python functions from Fortran with GCC 4.8.3. Note that an attacker could potentially obtain arbitrary code execution from the resulting segmentation fault...

Denial Of Service (DoS)

numpy is vulnerable to denial of service. In systems without support in the underlying BLAS, a crash occurs when numpy.dot handles arrays with more than 231 elements or 16GB. Note that an attacker could potentially obtain arbitrary code execution from the resulting segmentation fault...

CVE-2019-15860

Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002...

CVE-2019-5609

In FreeBSD 12.0-STABLE before r350619, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350619, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the bhyve e1000 device emulation used a guest-provided value to determine the size of the on-stack buffer without...