238 matches found
[SECURITY] [DSA 4807-1] openssl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4807-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 08, 2020 https://www.debian.org/security/faq -...
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1i-alt1
Dec. 8, 2020 Gleb Fotengauer-Malinovskiy 1.1.1i-alt1 - Updated to 1.1.1i fixes CVE-2020-1971...
CVE-2020-1971
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERALNAMEcmp which compares different instances of a GENERALNAME to see if they are equal or not. This function behaves incorrect...
FreeBSD-SA-20:33.openssl
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:33.openssl Security Advisory The FreeBSD Project Topic: OpenSSL NULL pointer de-reference Category: contrib Module: openssl Announced: 2020-12-08 Affects: Al...
OpenSSL: EDIPARTYNAME NULL Pointer De-reference Vulnerability (CVE-2020-1971) - Linux
OpenSSL is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...
RHEL 8 : kernel-rt (RHSA-2019:1971)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1971 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
CVE-2019-1971
CVE-2019-1971 – Cisco NFVIS command-injection : The vulnerability is in the NFVIS web portal where insufficient input validation during authentication allows an unauthenticated, remote attacker to inject commands and execute arbitrary code with root privileges on the underlying OS. Connected sour...
asca-1971.co.jp XSS vulnerability
Open Bug Bounty ID: OBB-673853 Description| Value ---|--- Affected Website:| asca-1971.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mgid.com XSS vulnerability
Vulnerable URL: http://www.mgid.com/ghits/2216340/i/2235%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1971 VIP website status:| Yes Check mgid.com SSL connection:|...
CVE-2016-1971
The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status check, which might allow remote attackers to cause a denial of service memory corruption or possibly have other impact via unknown vectors...
CVE-2016-1971
CVE-2016-1971 affects Mozilla Firefox before 45.0 on Windows, via the I420VideoFrame::CreateFrame function in WebRTC, where an unspecified status check is omitted. This can lead to memory corruption and a possible denial of service or other impacts. Public-lesson coverage in connected documents i...
CVE-2015-1971
Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager RQM 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Te...
CVE-2015-1971
CVE-2015-1971 affects IBM Jazz Team Server-based products across CLM, RRC, RDNG, RELM, RTC, RQM, Rhapsody DM, and RSA DM. An unspecified denial-of-service vulnerability exists in Jazz Team Server components used by these products, with affected ranges spanning CLM 3.0.1–5.0.2, RRC 2.0–4.0.7, RDNG...
Oracle: Security Advisory (ELSA-2014-1971)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 7 : kernel (ELSA-2014-1971)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1971 advisory. - alsa control: Make sure that id-index does not overflow Jaroslav Kysela 1117313 1117314 CVE-2014-4656 - alsa control: Handle numid overflow Jaroslav...
CVE-2014-1971
Cross-site scripting XSS vulnerability in Silex before 2.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-1971
Silex contains a Cross-site scripting (XSS) vulnerability in versions prior to 2.0.0. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected software: Silex prior to 2.0.0. Root cause details are not fully specified in the provided documents, but...
CVE-2013-1971
The CVE-2013-1971 vulnerability concerns the Drupal 6.x MP3 Player contributed module. The issue is a cross-site scripting (XSS) flaw where remote authenticated users with certain permissions can inject arbitrary script/HTML via the MP3 filename, caused by insufficient filtering of user-supplied ...
SA-CONTRIB-2013-043 - MP3 Player - Cross Site Scripting (XSS)
This module enables you to easily enable a Flash MP3 Player on a CCK FileField. The module doesn't sufficiently filter user-supplied text from mp3 filenames. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to create a node with an mp3 filefield wi...