CVE-2014-0048 affecting package moby-buildx 0.4.1-3

CVE-2014-0048 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2014-5282 affecting package moby-buildx 0.4.1-3

CVE-2014-5282 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2014-0047 affecting package moby-buildx 0.4.1-3

CVE-2014-0047 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2014-6407 affecting package moby-buildx 0.4.1-3

CVE-2014-6407 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2014-9358 affecting package moby-buildx 0.4.1-3

CVE-2014-9358 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2014-8178 affecting package moby-buildx 0.4.1-3

CVE-2014-8178 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2014-5278 affecting package moby-buildx 0.4.1-3

CVE-2014-5278 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2014-9356 affecting package moby-buildx 0.4.1-3

CVE-2014-9356 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM InfoSphere Optim Performance Manager (CVE-2015-0383, CVE-2015-0410, CVE-2014-6593)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 and 7, that is used by IBM InfoSphere Optim Performance Manager. These issues were disclosed as part of the IBM Java SDK updates in January 2015. Vulnerability Details CVEID: CVE-2015-0383...

Security Bulletin: Vulnerability in SSLv3 affects IBM InfoSphere Optim Performance Manager (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM InfoSphere Optim Performance Manager OPM. Vulnerability Details CVE-ID: CVE-2014-3566 DESCRIPTION: IBM InfoSphere Optim Performance Manager...

Huawei EulerOS: Security Advisory for file (EulerOS-SA-2021-2116)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for perl-DBI (EulerOS-SA-2021-2112)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for perl-DBI (EulerOS-SA-2021-2158)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2015-5262, CVE-2014-3577, CVE-2012-6153, CVE-2011-1498)

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager versions 4.2.0, 4.1.1 and 3.9. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security...

EulerOS Virtualization 3.0.2.2 : python-pillow (EulerOS-SA-2021-2163)

According to the version of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a...

EulerOS Virtualization 3.0.2.2 : python-lxml (EulerOS-SA-2021-2162)

According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct...

Advisory ROSA-SA-2021-2001

Software: xdg-utils 1.1.0 OS: Cobalt 7.9 CVE-ID: CVE-2014-9622 CVE-Crit: HIGH CVE-DESC: Eval injection vulnerability in xdg-utils 1.1.0 RC1 in the absence of a supported desktop environment allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open. CVE-STATUS:...

Advisory ROSA-SA-2021-1978

Software: stunnel 4.56 OS: Cobalt 7.9 CVE-ID: CVE-2014-0016 CVE-Crit: MEDIUM CVE-DESC: stunnel before 5.00 when using fork streaming does not properly update the OpenSSL pseudo-random number generator PRNG state, which causes subsequent children with the same process ID to use the same entropy po...

Advisory ROSA-SA-2021-1969

Software: sendmail 8.14.7 OS: Cobalt 7.9 CVE-ID: CVE-2014-3956 CVE-Crit: CRITICAL CVE-DESC: The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order and therefore misses setting expected FDCLOEXEC flags, which allows local users to access unintended file...

Advisory ROSA-SA-2021-1959

Software: qt 4.8.7 OS: Cobalt 7.9 CVE-ID: CVE-2014-0190 CVE-Crit: HIGH CVE-DESC: The GIF decoder in QtGui in Qt before version 5.3 allows remote attackers to cause a denial of service dereferencing a NULL pointer via invalid width and height values in a GIF image. CVE-STATUS: default CVE-REV:...