71 matches found
ruby:2.6 security, bug fix, and enhancement update
ruby 2.6.10-109 - Upgrade to Ruby 2.6.10. Resolves: rhbz2088415 - Fix buffer overrun in String-to-Float conversion. Resolves: CVE-2022-28739 - Fix FTBFS due to an incompatible load directive. - Fix a fiddle import test on an optimized glibc on Power 9...
Moderate: Red Hat Security Advisory: ruby:2.6 security, bug fix, and enhancement update
An update for the ruby:2.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
OESA-2022-1700 ruby security update
Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and...
CVE-2022-23340
Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results...
CVE-2022-23340
Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results...
PT-2021-19956 · Apache · Apache Dubbo
Name of the Vulnerable Software and Affected Versions: Apache Dubbo versions prior to 2.6.10 and 2.7.10 Description: Apache Dubbo is a Java-based, open-source RPC framework. The issue concerns pre-auth remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main...
SpinetiX Fusion Digital Signage 3.4.8 Database Backup Disclosure
SpinetiX Fusion Digital Signage 3.4.8 Database Backup Disclosure Vendor: SpinetiX AG Product web page: https://www.spinetix.com Affected version: = 3.4.8 1.0.36274 Summary: At SpinetiX we inspire businesses to unlock the potential of their story. We believe in the power of digital signage as a...
Schneider Electric Pelco Sarix/Spectra Cameras CSRF Enable SSH Root Access
Summary Pelco offers the broadest selection of IP cameras designed for security surveillance in a wide variety of commercial and industrial settings. From our industry-leading fixed and high-speed IP cameras to panoramic, thermal imaging, explosionproof and more, we offer a camera for any...
SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2017:1400-1)
This update for java-170-openjdk fixes the following issues : - Update to 2.6.10 - OpenJDK 7u141 bsc1034849 - Security fixes - S8163520, CVE-2017-3509: Reuse cache entries - S8163528, CVE-2017-3511: Better library loading - S8165626, CVE-2017-3512: Improved window framing - S8167110, CVE-2017-351...
Direct access of prefixed controller actions
More info at https://bakery.cakephp.org/2015/08/06/cakephp2592610272released.html...
Fedora 20 : moodle-2.6.10-1.fc20 (2015-4530)
Update to latest versions of the respective branches. f20 has been updated from 2.5.x to 2.6.x because 2.5.x is EOL. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...
Linux Kernel <= 2.6.10 Local Denial of Service Exploit
No description provided by source. / Removed ='s at the bottom /str0ke / / linux kernel =2.6.102.6.x DOS exploit writen by ChoiX c uKt Research [email protected] / include stdio.h include stdlib.h include sys/types.h include sys/stat.h include fcntl.h include unistd.h include...
FCKedtior 2.6.10 Reflected Cross-Site Scripting (XSS)
Class Cross-Site Scripting Remote Yes Published 2nd June 2014 Credit Robin Bailey of Dionach [email protected] Vulnerable FCKeditor = 2.6.10 FCKeditor is prone to a reflected cross-site scripting XSS vulnerability due to inadequately sanitised user input. An attacker may leverage this issue to ru...
FCKeditor 2.6.10 Cross Site Scripting
Class Cross-Site Scripting Remote Yes Published 2nd June 2014 Credit Robin Bailey of Dionach [email protected] Vulnerable FCKeditor alertdocument.cookie;//=zz The vendor was notified of this issue, and FCKeditor 2.6.11 was released to address this vulnerability. See the following vendor...
Postfix SMTP Server Cyrus SASL Support Memory Corruption Vulnerability
Postfix SMTP server is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720)
On-line version will be at http://www.postfix.org/CVE-2011-1720.html Summary ======= The Postfix SMTP server has a memory corruption error when the Cyrus SASL library is used with authentication mechanisms other than PLAIN and LOGIN the ANONYMOUS mechanism is unaffected but should not be enabled...
Directory traversal
Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System SMS 2.6.10, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the page parameter to index.php. NOTE: some of these details are obtained from third party...
Linux Kernel wait_task_stopped本地拒绝服务漏洞
Linux是一款开放源代码的操作系统。 Linux不正确处理部分进程退出条件的处理，本地攻击者可以利用漏洞以系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Linux Kernel ChangeLog-2.6.23.8 Linux Linux kernel 2.6.23 .7 Linux kernel 2.6.23 .6 Linux kernel 2.6.23 .5 Linux kernel 2.6.23 .4 Linux kernel 2.6.23 .3 Linux kernel 2.6.23 .2 Linux kernel 2.6.23 -rc2 Linux kernel...
Linux Kernel ATM SkBuff Dereference Remote Denial of Service Vulnerability
这个问题是在Kernel处理输入ATM（异步传输模式）数据时被触发。 利用这个漏洞，攻击者可以目标Kernel死机，导致拒绝服务的发生。 本问题只影响那些具有ATM硬件并且配置成支持ATM的Kernel的系统。 Kernel版本从2.6.0到2.6.17（包括2.6.17）都受到该漏洞影响。 PHP 5 受此漏洞影响。 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Operating System Enterprise Server 2.0 RedHat Enterprise Linux WS 4 RedHat...
[Full-disclosure] [USN-281-1] Linux kernel vulnerabilities
=========================================================== Ubuntu Security Notice USN-281-1 May 04, 2006 linux-source-2.6.10, linux-source-2.6.12 vulnerabilities CVE-2006-0557, CVE-2006-1052, CVE-2006-1055, CVE-2006-1066, CVE-2006-1242, CVE-2006-1343, CVE-2006-1368, CVE-2006-1525...