Debian: Security Advisory (DLA-1909-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1909-1] freetype security update

Package : freetype Version : 2.5.2-3+deb8u4 CVE ID : CVE-2015-9381 CVE-2015-9382 CVE-2015-9383 Several newly-referenced issues have been fixed in the FreeType 2 font engine. CVE-2015-9381 heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c CVE-2015-9382 buffer over-read in...

CVE-2015-9358

creationtimestamp| type| source ---|---|--- 2019-09-03 20:33:16+00:00| seen| https://t.me/cibsecurity/6514...

CVE-2015-9355

creationtimestamp| type| source ---|---|--- 2019-09-03 18:31:27+00:00| seen| https://t.me/cibsecurity/6510...

CVE-2015-9383

FreeType before 2.6.2 has a heap-based buffer over-read in ttcmap14validate in sfnt/ttcmap.c...

CVE-2015-9381

FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c...

CVE-2015-9382

FreeType before 2.6.1 has a buffer over-read in skipcomment in psaux/psobjs.c because psparserskipPStoken is mishandled in an FTNewMemoryFace operation...

CVE-2015-9383

FreeType before 2.6.2 has a heap-based buffer over-read in ttcmap14validate in sfnt/ttcmap.c...

DEBIAN-CVE-2015-9382

FreeType before 2.6.1 has a buffer over-read in skipcomment in psaux/psobjs.c because psparserskipPStoken is mishandled in an FTNewMemoryFace operation...

CVE-2015-9381

FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c...

CVE-2015-9383

CVE-2015-9383 affects FreeType prior to 2.6.2, with a heap-based buffer over-read in tt_cmap14_validate (sfnt/ttcmap.c). Connected documents corroborate the presence of this CVE and list FreeType versions affected across multiple advisories, but do not provide a vendor/product fix details beyond ...

CVE-2015-9382

FreeType vulnerability CVE-2015-9382 affects FreeType before 2.6.1. Root cause: buffer over-read in skip_comment (psobjs.c) due to mishandling of ps_parser_skip_PS_token in an FT_New_Memory_Face operation. In practice, this can lead to information disclosure or memory-related denial of service (a...

CVE-2015-9381

FreeType vulnerability CVE-2015-9381 affects FreeType before 2.6.1, with a heap-based buffer over-read in T1_Get_Private_Dict (type1/t1parse.c). This can lead to information disclosure. Connected sources confirm the issue is due to a memory boundary validation flaw in that function. Remediation s...

Roundcube Webmail < 1.0.6, 1.1.x < 1.1.2 XSS Vulnerability

Roundcube Webmail is prone to a cross-site scripting XSS vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2015-0062

creationtimestamp| type| source ---|---|--- 2019-09-02 07:38:24+00:00| seen| MISP/5d66cc9e-9f94-4a7e-8a49-115e0a3b4631 2020-10-09 14:38:35+00:00| seen| MISP/459a5739-951a-4559-a57b-71461249891f 2026-07-29 12:01:14+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30...

CVE-2015-9380

The photo-gallery plugin before 1.2.42 for WordPress has CSRF...

CVE-2015-9380

The CVE-2015-9380 entry corresponds to a CSRF vulnerability in the WordPress plugin Photo Gallery (versions before 1.2.42). The issue is described as a cross-site request forgery in the photo-gallery plugin, enabling unauthorized actions without authentication. Multiple sources (NVD description, ...

FreeBSD : RDoc -- multiple jQuery vulnerabilities (ed8d5535-ca78-11e9-980b-999ff59c22ea)

Ruby news : There are multiple vulnerabilities about Cross-Site Scripting XSS in jQuery shipped with RDoc which bundled in Ruby. All Ruby users are recommended to update Ruby to the latest release which includes the fixed version of RDoc. The following vulnerabilities have been reported...

CVE-2015-9334

creationtimestamp| type| source ---|---|--- 2019-08-29 16:33:41+00:00| seen| https://t.me/cibsecurity/6436...

CVE-2015-9359

The CVE-2015-9359 entry concerns the WordPress Jetpack plugin (pre-3.4.3) with a cross-site scripting (XSS) vulnerability exploitable via add_query_arg() and remove_query_arg(). Affected product: Jetpack plugin for WordPress; vulnerable component/behavior: input/output handling around query arg f...