CVE-2021-38370

In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...

WordPress Relevanssi Premium Plugin < 2.25 is vulnerable to Sensitive Data Exposure

Software Relevanssi Premium Type Plugin Vulnerable versions 2.25 Fixed in 2.25 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 420edf018e9b Credits N/A Required privilege Unauthenticated...

Schneider Electric EcoStruxure Power Commission 授权问题漏洞

Schneider Electric EcoStruxure Power Commission is a comprehensive software from Schneider Electric France that provides powerful features for setting up, testing and commissioning low voltage distribution cabinets. An authorization issue vulnerability exists in Schneider Electric EcoStruxure Pow...

GLSA-202301-07 : Alpine: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202301-07 Alpine: Multiple Vulnerabilities - In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS. CVE-2021-38370 - Alpine before 2.25 allows remote attackers to cause a denial of service...

CVE-2022-23105

Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations...

Linux / Unix su Privilege Escalation Exploit

This Metasploit module attempts to create a new login session by invoking the su command of a valid username and password. If the login is successful, a new session is created via the specified payload. Because su forces passwords to be passed over stdin, this module attempts to invoke a...

dnsmasq 2.25 DHCP Request Denial of Service (CVE-2008-3214)

The version of dnsmasq installed on the remote host is 2.25, and thus, is affected by a denial of service vulnerability when handling DHCP requests. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106137; scriptversion"1.4";...

GNU glibc Local Memory Corruption Vulnerability

glibc a.k.a. GNU C Library, libc6 is an open-source, free C language compiler released under the LGPL license. A security vulnerability exists in glibc 2.25 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...

[ASA-201706-23] glibc: privilege escalation

Arch Linux Security Advisory ASA-201706-23 ========================================== Severity: High Date : 2017-06-20 CVE-ID : CVE-2017-1000366 Package : glibc Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-307 Summary ======= The package glibc before version...

GNU C Library iconv Denial of Service Vulnerability

The GNU C Library a.k.a. glibc, libc6 is an open-source, free C language compiler released under the LGPL license. A security vulnerability exists in the iconv program in GNU C Library version 2.25 and earlier. An attacker can exploit this vulnerability to cause a denial of service infinite loop...

Fedora Update for openconnect FEDORA-2010-12253

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SCSA015.txt

====================================================================== Security Corporation Security Advisory SCSA-015 Remote Denial of Service Vulnerability in PowerFTP ====================================================================== PROGRAM: PowerFTP HOMEPAGE: http://www.cooolsoft.com...