SUSE-SU-2020:3087-1 Security update for samba

This update for samba fixes the following issues: - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records bsc1177613. - CVE-2020-14323: Unprivileged user can crash winbind; bsc1173994. - CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify...

openSUSE: Security Advisory for libopenmpt (openSUSE-SU-2019:2213-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

jungutbatu.desa.id Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1028876 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting jungutbatu.desa.id websit...

openSUSE Security Update : libopenmpt (openSUSE-2019-2213)

This update for libopenmpt fixes the following issues : Security issues fixed : - CVE-2018-20861: Fixed crash with certain malformed custom tunings in MPTM files bsc1143578. - CVE-2018-20860: Fixed crash with malformed MED files bsc1143581. - CVE-2019-14383: Fixed J2B that allows an assertion...

openSUSE Security Update : libopenmpt (openSUSE-2019-2212)

This update for libopenmpt fixes the following issues : Security issues fixed : - CVE-2018-20861: Fixed crash with certain malformed custom tunings in MPTM files bsc1143578. - CVE-2018-20860: Fixed crash with malformed MED files bsc1143581. - CVE-2019-14383: Fixed J2B that allows an assertion...

openSUSE: Security Advisory for libopenmpt (openSUSE-SU-2019:2212-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:2213-1 Security update for libopenmpt

This update for libopenmpt fixes the following issues: Security issues fixed: - CVE-2018-20861: Fixed crash with certain malformed custom tunings in MPTM files bsc1143578. - CVE-2018-20860: Fixed crash with malformed MED files bsc1143581. - CVE-2019-14383: Fixed J2B that allows an assertion failu...

Security update for libopenmpt (moderate)

openSUSE Security Update: Security update for libopenmpt Announcement ID: openSUSE-SU-2019:2212-1 Rating: moderate References: 1143578 1143581 1143582 1143584 Cross-References: CVE-2018-20860 CVE-2018-20861 CVE-2019-14382 CVE-2019-14383 Affected Products: openSUSE Leap 15.0 An update that fixes...

SUSE SLED15 / SLES15 Security Update : libopenmpt (SUSE-SU-2019:2435-1)

This update for libopenmpt fixes the following issues : Security issues fixed : CVE-2018-20861: Fixed crash with certain malformed custom tunings in MPTM files bsc1143578. CVE-2018-20860: Fixed crash with malformed MED files bsc1143581. CVE-2019-14383: Fixed J2B that allows an assertion failure...

SUSE-SU-2019:2435-1 Security update for libopenmpt

This update for libopenmpt fixes the following issues: Security issues fixed: - CVE-2018-20861: Fixed crash with certain malformed custom tunings in MPTM files bsc1143578. - CVE-2018-20860: Fixed crash with malformed MED files bsc1143581. - CVE-2019-14383: Fixed J2B that allows an assertion failu...

CVE-2018-14383

The Transition Technologies "The Scheduler" app 5.1.3 for Jira allows XXE due to a weakly configured/parameterized XML parser. It was fixed in the versions 5.2.1 and 3.3.7...

CVE-2018-14383

CVE-2018-14383 affects Transition Technologies “The Scheduler” app for Jira. The vulnerability is an XML External Entity (XXE) issue caused by a weakly configured/parameterized XML parser. Affected versions include 5.1.3, with fixes implemented in 5.2.1 (and 3.3.7 for Jira server installations). ...

CVE-2019-14383

J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...

CVE-2019-14383

J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...

CVE-2019-14383

CVE-2019-14383 affects libopenmpt prior to 0.4.2, where J2B parsing can trigger an assertion failure when handling debug STLs. Multiple third‑party advisories (SUSE/openSUSE updates and related OSS/OSV listings) confirm this vulnerability and show a fix was released in libopenmpt 0.4.2 and newer....

CVE-2017-14383

CVE-2017-14383 affects Dell EMC VNX2 (Operating Environment for File) versions prior to 8.1.9.217 and Dell EMC VNX1 versions prior to 7.1.80.8, where the web server error page in the VNX Control Station is susceptible to a reflected cross-site scripting (XSS) vulnerability. A remote, unauthentica...