2263 matches found
CVE-2024-2362
The CVE-2024-2362 entry concerns parisneo/lollms-webui versión 9.3 on Windows, with a path traversal vulnerability in the del_preset endpoint due to inadequate input sanitization. The issue permits an attacker to delete files outside the intended directory by supplying absolute or traversal path...
CLSA-2024-1717691587 Fix CVE(s): CVE-2024-2961
SECURITY UPDATE: buffer overflow in iconv function when converting to ISO-2022-CN-EXT character set - debian/patches/any/CVE-2024-2961.patch: fix out-of-bound writes in ISO-2022-CN-EXT escape sequences - CVE-2024-2961...
ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...
RHEL 4 : audit (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - Audit: log terminal emulator escape sequences handling CVE-2015-5186 Note that Nessus has not tested for this issue...
RHEL 7 : python-gunicorn (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-gunicorn: Improper neutralization of CRLF Sequences http/wsgi.py:processheaders can allow an attacker to cau...
RHEL 6 : audit (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - Audit: log terminal emulator escape sequences handling CVE-2015-5186 Note that Nessus has not tested for this issue...
SUSE CVE-2024-33899
RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences...
GHSA-6XWF-7RFM-4GWC TYPO3 Cross-Site Scripting in Filelist Module
It has been discovered that the output table listing in the “Files” backend module is vulnerable to cross-site scripting when a file extension contains malicious sequences. Access to the file system of the server - either directly or through synchronization - is required to exploit the...
CVE-2024-36052
RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899...
CVE-2024-36052
RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899...
CVE-2024-36052
RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899...
CVE-2024-36052
CVE-2024-36052: WinRAR before 7.00 on Windows permits spoofing of screen output via ANSI escape sequences. Connected sources also note ANSI escape handling in unrar implementations on Linux/UNIX (Astra Linux) and Linux advisories; remediation generally requires upgrading to patched/unaffected ver...
WinRAR 安全漏洞
WinRAR is a file compressor. The product supports compression and decompression of files in RAR, ZIP, and other formats, among others. RARLAB A security vulnerability exists in WinRAR versions prior to 7.00, which stems from a vulnerability that allows an attacker to spoof screen output via ANSI...
PT-2024-3780 · Winrar · Winrar
Name of the Vulnerable Software and Affected Versions: WinRAR versions prior to 7.00 Description: The issue is related to errors in processing input data, which can be exploited by a remote attacker to cause a denial of service or spoof the screen output. This can be achieved through the use of...
RHEL 8 : less (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - less: crafted data can result in less -R not filtering ANSI escape sequences sent to the terminal CVE-2022-46663 No...
RHEL 7 : python-gunicorn (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-gunicorn: Improper neutralization of CRLF Sequences http/wsgi.py:processheaders can allow an attacker to cau...
Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2024-1604)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
LG Simple Editor 安全漏洞
LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A directory traversal arbitrary file deletion vulnerability exists in LG Simple Editor, which can be exploited by an attacker to delete a system by sending...
LG Simple Editor 安全漏洞
LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A directory traversal arbitrary file deletion vulnerability exists in LG Simple Editor, which can be exploited by an attacker to delete a system by sending...