CVE-2018-14470

The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babelprintv2...

OPENSUSE-SU-2019:2245-1 Security update for lxc

This update for lxc fixes the following issues: Update to lxc 3.2.1. The changelog can be found at https://discuss.linuxcontainers.org/t/lxc-3-2-1-has-been-released/5322 + seccomp: support syscall forwarding to userspace + add lxc.seccomp.allownesting + pidfd: Add initial support for the new pidf...

Security update for lxc (moderate)

openSUSE Security Update: Security update for lxc Announcement ID: openSUSE-SU-2019:2245-1 Rating: moderate References: 1131762 Cross-References: CVE-2019-5736 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for lxc fixes the...

[SECURITY] Fedora 31 Update: sphinx-2.2.11-13.fc31

Sphinx is a full-text search engine, distributed under GPL version 2. Commercial licensing e.g. for embedded use is also available upon request. Generally, it's a standalone search engine, meant to provide fast, size-efficient and relevant full-text search functions to other applications. Sphinx...

UBUNTU-CVE-2018-14470

The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babelprintv2...

Amazon Linux 2 : kernel (ALAS-2019-1280)

A buffer overflow due to a singed-unsigned comparsion was found in hidpprocessreport in the net/bluetooth/hidp/core.c in the Linux kernel. The buffer length is an unsigned int but gets cast to a signed int which in certain conditions can lead to a system panic and a denial-of-service. CVE-2018-93...

Amazon Linux AMI : kernel (ALAS-2019-1280)

It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtualized guests.CVE-2018-15594 A buffer overflow due to a singed-unsigned...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1919)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The xfsbmapextentstobtree function in fs/xfs/libxfs/xfsbmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service...

Medium: kernel

Issue Overview: It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtualized guests.CVE-2018-15594 A buffer overflow due to a...

Medium: kernel

Issue Overview: A buffer overflow due to a singed-unsigned comparsion was found in hidpprocessreport in the net/bluetooth/hidp/core.c in the Linux kernel. The buffer length is an unsigned int but gets cast to a signed int which in certain conditions can lead to a system panic and a...

sfb-v2.swirl24.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-961868 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting sfb-v2.swirl24.de website and...

CVE-2019-5475

CVE-2019-5475 is an OS command injection in the Nexus Yum Repository Plugin (Nexus Repository Manager) that can lead to Remote Code Execution. The vulnerability occurs in the Yum: Configuration capability when the capability’s payload data is not properly sanitized, allowing an attacker with admi...

CVE-2019-15481

Kimai v2 before 1.1 has XSS via a timesheet description...

CVE-2019-15481

Kimai v2 before 1.1 has XSS via a timesheet description...

Information disclosure

Kimai v2 before 1.1 has XSS via a timesheet description...

CVE-2019-15481

Affected product: Kimai v2 prior to 1.1. The vulnerability is an XSS flaw in the timesheet description field, where unescaped user input can be rendered in the UI. Root cause: lack of proper escaping/validation of the timesheet description leading to script injection. Impact: cross-site scripting...

CVE-2019-15481

Kimai v2 before 1.1 has XSS via a timesheet description...

PT-2019-14210

Name of the Vulnerable Software and Affected Versions Kimai v2 version 1.0 Description The issue allows for XSS via a timesheet description. Recommendations For Kimai v2 version 1.0, update to version 1.1 or later to resolve the issue...

CVE-2019-0338

During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure...

CVE-2019-0338: Exposure of Sensitive Information to an Unauthorized Actor

During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure...