Skip to content
OpenAdvisories

Archive

8 June 2018

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 5.9

    Missing verification of host key for kdump server

    The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump prior to version 2012-01-20. This is similar to CVE-2011-3588, but different in that the kdump implementation is specific to SUSE. A remote ma…

  • Medium 5.4

    unix2_chkpwd do not check for a valid account

    A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled. Affected releases are SUSE Linux Enterprise: versions prior to 12.

  • Medium 6.3

    Unverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM) before 6.2-23739 allo…

  • Medium 4.4

    IBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other updates without sufficie…