8 matches found
PT-2026-48551
Juicer through 1.12.18 fails to escape remote feed API response fields before rendering them on the admin settings page. Attackers controlling the connected feed data can inject script that executes in an administrator's browser when the settings page loads...
Elgg open redirect
Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect...
Mageia: Security Advisory (MGASA-2016-0156)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.9.1 : dbus (EulerOS-SA-2021-1597)
According to the version of the dbus packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when...
PT-2021-11780 · D-Bus +3 · D-Bus +3
Name of the Vulnerable Software and Affected Versions: D-Bus Development branch versions 1.13.16 and earlier D-Bus versions 1.12.18 and earlier D-Bus versions 1.10.30 and earlier Description: A use-after-free flaw was found in D-Bus when a system has multiple usernames sharing the same UID. When ...
Fedora 31 : 1:dbus (2020-99ee5a2baa)
Update to 1.12.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...
[ASA-202006-9] dbus: denial of service
Arch Linux Security Advisory ASA-202006-9 ========================================= Severity: Low Date : 2020-06-13 CVE-ID : CVE-2020-12049 Package : dbus Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-1183 Summary ======= The package dbus before version 1.12.18-1 ...
Elgg Input Validation Error Vulnerability
Elgg is a set of open source social networking engine. The product blog, file sharing, groups and other features. An input validation error vulnerability exists in Elgg versions prior to 1.12.18 and 2.3.x prior to 2.3.11, which stems from a network system or product that does not properly validat...