Ahsay Backup v7.x-v8.1.1.50 (authenticated) file upload

This module exploits an authenticated insecure file upload and code execution flaw in Ahsay Backup v7.x - v8.1.1.50. To succesfully execute the upload credentials are needed, default on Ahsay Backup trial accounts are enabled so an account can be created. It can be exploited in Windows and Linux...

Security Only Update for .NET Framework 3.0 SP2, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4507414)

Security Only Update for .NET Framework 3.0 SP2, 4.5.2, 4.6 for Windows Server 2008 SP2 KB4507414 Applies to: Microsoft .NET Framework 3.0 SP2 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Summary A remote code execution vulnerability exists in .NET software when the software fails ...

Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4507423)

Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 KB4507423 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Summary A remote code execution vulnerability exists in .NET...

KB4505419 - Description of the security update for SQL Server 2014 SP2 CU17: July 9, 2019

KB4505419 - Description of the security update for SQL Server 2014 SP2 CU17: July 9, 2019 Summary A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions. An attacker who successfully exploited this vulnerability could...

KB4505222 - Description of the security update for SQL Server 2016 SP2 CU7: July 9, 2019

KB4505222 - Description of the security update for SQL Server 2016 SP2 CU7: July 9, 2019 Summary A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions. An attacker who successfully exploited this vulnerability could execu...

KB4505217 - Description of the security update for SQL Server 2014 SP2 GDR: July 9, 2019

KB4505217 - Description of the security update for SQL Server 2014 SP2 GDR: July 9, 2019 Summary A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions. An attacker who successfully exploited this vulnerability could execu...

openSUSE Security Update : gstreamer-0_10-plugins-base (openSUSE-2019-1638)

This update for gstreamer-010-plugins-base fixes the following issues : Security issue fixed : - CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser bsc1133375. This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : gstreamer-plugins-base (openSUSE-2019-1639)

This update for gstreamer-plugins-base fixes the following issue: Security issue fixed : - CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser bsc1133375. This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : python-Jinja2 (openSUSE-2019-1614)

This update for python-Jinja2 fixes the following issues : Security issues fixed : - CVE-2016-10745: Fixed a sandbox escape caused by an information disclosure via str.format bsc1132174. - CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format bsc1132323. -...

Security update for python-Jinja2 (important)

openSUSE Security Update: Security update for python-Jinja2 Announcement ID: openSUSE-SU-2019:1614-1 Rating: important References: 1125815 1132174 1132323 Cross-References: CVE-2016-10745 CVE-2019-10906 CVE-2019-8341 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities...

SUSE-SU-2019:1425-1 Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92109 fixes one issue. The following security issue was fixed: - CVE-2018-5390: The Linux kernel could be forced to make very expensive calls to tcpcollapseofoqueue and tcppruneofoqueue for every incoming packet which can lead to a denial of service...

openSUSE Security Update : screen (openSUSE-2019-1485)

This update for screen fixes the following issues : Security issue fixed : - CVE-2015-6806: Fixed a stack overflow due to deep recursion bsc944458. Non-security issue fixed : - Fixed segmentation faults related to altscreen and resizing screen bsc1130831. This update was imported from the...

EulerOS 2.0 SP2 : libsndfile (EulerOS-SA-2019-1590)

According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of...

EulerOS 2.0 SP2 : bash (EulerOS-SA-2019-1563)

According to the version of the bash package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASHCMDS, thus allowing the user to execute any command with the...

EulerOS 2.0 SP2 : gstreamer-plugins-base (EulerOS-SA-2019-1577)

According to the version of the gstreamer-plugins-base package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server,...

May 14, 2019—KB4499149 (Monthly Rollup)

None None...

EulerOS 2.0 SP2 : libtasn1 (EulerOS-SA-2019-1311)

According to the version of the libtasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Two errors in the 'asn1findnode' function lib/parseraux.c within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer...

EulerOS 2.0 SP2 : libxml2 (EulerOS-SA-2019-1315)

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A null pointer dereference vulnerability exists in the xpath function of libxml2 when parsing invalid XPath expression. Applications processing...

EulerOS 2.0 SP2 : dovecot (EulerOS-SA-2019-1279)

According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that Dovecot incorrectly handled client certificates. A remote attacker in possession of a valid certificate with an empty...

CVE-2018-18285

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database...