5922 matches found
Design/Logic Flaw
The secureload function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, which might allow remote attackers to execute arbitrary code by leveraging knowledge of encryptionkey...
PT-2018-4911
Name of the Vulnerable Software and Affected Versions web2py versions prior to 2.14.2 Description The issue allows remote attackers to execute arbitrary code by leveraging knowledge of encryption key, potentially through deserialization of session information stored in cookies using the...
openSUSE Security Update : ecryptfs-utils (openSUSE-2018-126)
This update for ecryptfs-utils fixes the following issues : - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...
SUSE SLED12 / SLES12 Security Update : ecryptfs-utils (SUSE-SU-2018:0336-1)
This update for ecryptfs-utils fixes the following issues : - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...
SUSE-SU-2018:0336-1 Security update for ecryptfs-utils
This update for ecryptfs-utils fixes the following issues: - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...
[SECURITY] Fedora 27 Update: coreutils-8.27-19.fc27
These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages...
OracleVM 3.3 / 3.4 : bind (OVMSA-2018-0014)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2017-3145 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2018-0014. include'compat.inc'; if description scriptid106291;...
Fedora 27 : sensible-utils (2017-2fab3f12c4)
Update to version 0.0.11, see http://metadata.ftp-master.debian.org/changelogs/main/s/sensible-utils /sensible-utils0.0.11changelog for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted t...
CVE-2015-2298
node/utils/ExportEtherpad.js in Etherpad 1.5.x before 1.5.2 might allow remote attackers to obtain sensitive information by leveraging an improper substring check when exporting a padID...
PT-2018-4365
Name of the Vulnerable Software and Affected Versions Etherpad versions 1.5.x through 1.5.1 Description The issue is related to an improper substring check when exporting a padID in the node/utils/ExportEtherpad.js file. This could potentially allow remote attackers to obtain sensitive informatio...
CVE-2015-2298: Exposure of Sensitive Information to an Unauthorized Actor
node/utils/ExportEtherpad.js in Etherpad 1.5.x before 1.5.2 might allow remote attackers to obtain sensitive information by leveraging an improper substring check when exporting a padID...
Debian: Security Advisory (DLA-1236-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1236-1 : plexus-utils security update
Charles Duffy discovered that the Commandline class in plexus-utils, a collection of components used by Apache Maven, does not correctly quote the contents of double-quoted strings. An attacker may use this flaw to inject arbitrary shell commands. For Debian 7 'Wheezy', these problems have been...
[SECURITY] [DLA 1236-1] plexus-utils security update
Package : plexus-utils Version : 1:1.5.15-4+deb7u1 CVE ID : CVE-2017-1000487 Charles Duffy discovered that the Commandline class in plexus-utils, a collection of components used by Apache Maven, does not correctly quote the contents of double-quoted strings. An attacker may use this flaw to injec...
DLA-1236-1 plexus-utils - security update
Bulletin has no description...
Plexus-utils Command Injection Vulnerability
Plexus-utils is an open source collection of multiple utility classes. A command injection vulnerability exists in versions of Plexus-utils prior to 3.0.16. No details of the vulnerability are provided at this time...
Opencv Integer Overflow Vulnerability
Opencv is an open source, cross-platform, lightweight computer vision library. The 'FillUniColor' and 'FillUniGray' functions in the opencv/modules/imgcodecs/src/utils.cpp file in Opencv 3.3 and earlier have an integer overflow vulnerability that stems from the program failing to detect the lengt...
Command injection
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings...
