SUSE-SU-2019:2719-2 Security update for python-xdg

This update for python-xdg fixes the following issues: Security issue fixed: - CVE-2014-1624: Fixed a TOCTOU race condition in getruntimedir. bsc859835...

UBUNTU-CVE-2014-7143

Python Twisted 14.0 trustRoot is not respected in HTTP client...

CVE-2014-7143

Python Twisted 14.0 trustRoot is not respected in HTTP client...

CVE-2014-7143

CVE-2014-7143 relates to Python Twisted 14.0 where the HTTP client does not respect trustRoot. Connected documents consistently describe this flaw as related to trustRoot not being respected in the Twisted 14.0 HTTP client. The available material does not provide explicit affected versions beyond...

EulerOS 2.0 SP5 : less (EulerOS-SA-2019-2164)

According to the version of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An out of bound read, with a maximum of 5 bytes, was found in the way the isutf8wellformed function parsed UTF-8 characters. If less was to be...

EulerOS 2.0 SP5 : gpgme (EulerOS-SA-2019-2125)

According to the versions of the gpgme package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GnuPG Made Easy GPGME is a library designed to make access to GnuPG easier for applications. It provides a high-level crypto API for encryption,...

EulerOS 2.0 SP5 : cifs-utils (EulerOS-SA-2019-2131)

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attackers to have...

CVE-2014-9013

The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote authenticated users to create arbitrary users and gain admin privileges via a request to wpmpppajaxcall with an execution target of wpinsertuser...

CVE-2014-9013

Summary: CVE-2014-9013 affects the WordPress WP Marketplace plugin (version 2.4.0) and is triggered via the ajaxinit function in wpmarketplace/libs/cart.php. The vulnerability allows remote authenticated users to call wpmp_pp_ajax_call and, through the execution target wp_insert_user or related c...

CVE-2014-9013

The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote authenticated users to create arbitrary users and gain admin privileges via a request to wpmpppajaxcall with an execution target of wpinsertuser...

CVE-2014-9014

The CVE-2014-9014 entry corresponds to a directory traversal vulnerability in WP Marketplace (WordPress plugin) before 2.4.1. An authenticated user could exploit an improper file parameter handling in wpmarketplace/libs/cart.php (ajaxinit) to download arbitrary files via a .. path traversal. Publ...

CVE-2014-9014

Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. dot dot in the file parameter...

CVE-2014-3180

CVE-2014-3180 affects the Linux kernel prior to 3.17, specifically the compatibility code path in kernel/compat.c. The vulnerability is an out-of-bounds read where restart_syscall uses uninitialized data when restarting compat_sys_nanosleep. Note: the description states the code path is unreachab...

CVE-2014-8181

The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SGIO buffer, which may leaking sensitive information to userspace...

CVE-2014-8181

The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SGIO buffer, which may leaking sensitive information to userspace...

CVE-2014-8181

CVE-2014-8181 affects the Linux kernel in Red Hat Enterprise Linux 7 and MRG-2, where SG_IO buffer garbage data is not cleared, potentially leaking sensitive information to userspace. The core issue is the kernel not clearing garbage data in SG_IO buffers, enabling partial information disclosure ...

Mozilla Firefox ESR < 31.2 Multiple Vulnerabilities

Binary data 701248.prm...

CVE-2014-3649

CVE-2014-3649 affects Red Hat/JBoss AeroGear and refers to a reflected XSS vulnerability in the password field. The root cause cited by CNVD is lack of proper validation of client-side data by the WEB application, enabling an attacker to execute client-side code in a victim’s browser. Public expl...

[SECURITY] [DLA 1979-1] italc security update

Package : italc Version : 1:2.0.2+dfsg1-2+deb8u1 CVE ID : CVE-2014-6051 CVE-2014-6052 CVE-2014-6053 CVE-2014-6054 CVE-2014-6055 CVE-2016-9941 CVE-2016-9942 CVE-2018-6307 CVE-2018-7225 CVE-2018-15126 CVE-2018-15127 CVE-2018-20019 CVE-2018-20020 CVE-2018-20021 CVE-2018-20022 CVE-2018-20023...

limaretailpark.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1005473 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting limaretailpark.com websi...