PT-2018-14840

Name of the Vulnerable Software and Affected Versions JEESNS version 1.3 Description The issue in JEESNS allows stored XSS via an HTML EMBED element. This is a different issue than previously identified vulnerabilities. Recommendations For JEESNS version 1.3, consider disabling the...

CVE-2018-19060

An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path...

CVE-2018-19060: NULL Pointer Dereference

An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path...

[SECURITY] Fedora 29 Update: coreutils-8.30-5.fc29

These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages...

Ubuntu: Security Advisory (USN-3650-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for xdg-utils (openSUSE-SU-2018:1596-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.5.0 : yum-utils (EulerOS-SA-2018-1349)

According to the version of the yum-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Tenable Network Security ha...

EulerOS Virtualization 2.5.1 : yum-utils (EulerOS-SA-2018-1327)

According to the version of the yum-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Tenable Network Security ha...

[SECURITY] Fedora 29 Update: yum-utils-1.1.31-517.fc29

yum-utils is a collection of utilities and examples for the yum package manager. It includes utilities by different authors that make yum easier and more powerful to use. These tools include: debuginfo-install, find-repos-of-install, needs-restarting, package-cleanup, repoclosure, repodiff,...

Fedora Update for yum-utils FEDORA-2018-3aafb854a9

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for yum-utils FEDORA-2018-4f0089c995

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 27 Update: yum-utils-1.1.31-514.fc27

yum-utils is a collection of utilities and examples for the yum package manager. It includes utilities by different authors that make yum easier and more powerful to use. These tools include: debuginfo-install, find-repos-of-install, needs-restarting, package-cleanup, repoclosure, repodiff,...

ViaBTC Exchange Server Integer Overflow Vulnerability (CNVD-2018-20071)

ViaBTC Exchange Server is a dedicated backend engine for cryptocurrency trading. An integer overflow vulnerability exists in the utils/utwssvr.c file in versions of ViaBTC Exchange Server prior to 2018-08-21. An attacker could exploit this vulnerability to cause memory corruption...

EulerOS 2.0 SP3 : yum-utils (EulerOS-SA-2018-1320)

According to the version of the yum-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Tenable Network Security has extracted th...

EulerOS 2.0 SP2 : yum-utils (EulerOS-SA-2018-1319)

According to the version of the yum-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Tenable Network Security has extracted th...

CVE-2018-17570

utils/utwssvr.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption...

CVE-2018-17568

utils/utrpc.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption...

Security Bulletin: A vulnerability in yum-utils affects PowerKVM

Summary PowerKVM is affected by a vulnerability in yum-utils. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-10897 DESCRIPTION: reposync could allow a remote attacker to traverse directories on the system, caused by the improper sanitation of paths in remote...

PT-2018-14059

Name of the Vulnerable Software and Affected Versions ViaBTC Exchange Server versions prior to 2018-08-21 Description The issue is related to an integer overflow in the utils/ut rpc.c file, which can lead to memory corruption. Recommendations For versions prior to 2018-08-21, update to a version...

PT-2018-14062

Name of the Vulnerable Software and Affected Versions ViaBTC Exchange Server versions prior to 2018-08-21 Description The issue is related to an integer overflow in the utils/ut ws svr.c file, which can lead to memory corruption. Recommendations For versions prior to 2018-08-21, update to a versi...