3669 matches found
Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 8 (VA MN: 7.0.2-623, VA Agent: 7.0.2-341)
The hotfix for Virtuozzo Automator 7.0.2 provides stability fixes. Vulnerability id: PVA-37429 Need to return userbeancounters stats to VA agent. Vulnerability id: PVA-37434 Unable to reboot VE while changing its RAM/CPU live. Vulnerability id: PVA-37359, PVA-37415, PVA-37438 Other fixes...
DEBIAN-CVE-2019-19055
A memory leak in the nl80211getftmresponderstats function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering nl80211hdrput failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this...
UBUNTU-CVE-2019-19055
A memory leak in the nl80211getftmresponderstats function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering nl80211hdrput failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this...
UBUNTU-CVE-2019-19066
A memory leak in the bfadimgetstats function in drivers/scsi/bfa/bfadattr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering bfaportgetstats failures, aka CID-0e62395da2bd...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Bitweaver 2.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to 1 stats/index.php or 2 newsletters/edition.php or the 3 username parameter to users/remindpassword.php, 4 days parameter to...
CVE-2012-5193: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Bitweaver 2.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to 1 stats/index.php or 2 newsletters/edition.php or the 3 username parameter to users/remindpassword.php, 4 days parameter to...
PT-2019-6784
Name of the Vulnerable Software and Affected Versions Bitweaver versions 2.8.1 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the path info to certain API endpoints such as "stats/index.php" or "newsletters/edition.php", ...
CVE-2010-2488
NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...
CVE-2010-2488
NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...
CVE-2010-2488
NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...
CVE-2010-2488
NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...
CVE-2010-2488
NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...
CVE-2010-2488: NULL Pointer Dereference
NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...
PT-2019-6548
Name of the Vulnerable Software and Affected Versions ZNC versions prior to 0.092 Description A NULL pointer dereference issue occurs due to traffic stats when there are unauthenticated connections. Recommendations For versions prior to 0.092, update to version 0.092 or later to resolve the issue...
PT-2019-4212
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.11 Description A memory leak in the bfad im get stats function allows attackers to cause a denial of service by triggering bfa port get stats failures. This issue is related to an uncontrolled resource...
Authentication flaw
In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport Layer Security TLS...
CVE-2019-6652
CVE-2019-6652 affects F5 BIG-IQ Centralized Management 6.0.0–6.1.0, where BIG-IQ services for stats do not require authentication and lack TLS. The vulnerability can allow an attacker to gain full access to the statistics database on affected BIG-IQ systems. Remediation per vendor is to upgrade t...
CVE-2019-6652: Missing Authentication for Critical Function
In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport Layer Security TLS...