65722 matches found
USN-5259-2: Cron vulnerabilities
USN-5259-1 fixed several vulnerabilities in Cron. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: It was discovered that the postinst maintainer script in Cron unsafely handled file permissions during package install or update operations. An attacker...
[SECURITY] [DLA 2996-1] mruby security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2996-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA May 06, 2022 https://wiki.debian.org/LTS -...
USN-5405-1: jbig2dec vulnerabilities
It was discovered that jbig2dec incorrectly handled memory when parsing invalid files. An attacker could use this issue to cause jbig2dec to crash, leading to a denial of service. CVE-2017-9216 It was discovered that jbig2dec incorrectly handled memory when processing untrusted input. An attacker...
libwav 安全漏洞
libwav is a simple wav library written in pure C. It can be used to create a wav file that can be used to write a wav file. A security vulnerability exists in libwav version 2017-04-20 and earlier versions, which stems from a use of uninitialized variables vulnerability in the function...
Debian DLA-2992-1 : openvpn - LTS security update
The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2992 advisory. - OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code...
PT-2022-19927 · Dji · Dji Drone Devices
Name of the Vulnerable Software and Affected Versions: DJI drone devices sold in 2017 through 2022 Description: The issue concerns DJI drone devices broadcasting unencrypted information about the drone operator's physical location via the AeroScope protocol. Recommendations: For DJI drone devices...
DJI drone 安全漏洞
DJI drone is a unmanned aircraft system. A security vulnerability exists in all versions of the DJI drone between 2017 and 2022 that stems from the disclosure of unencrypted information about the physical location of the drone operator via the AeroScope protocol...
IBM Java 6.1 < 6.1.8.50 / 7.0 < 7.0.10.10 / 7.1 < 7.1.4.10 / 8.0 < 8.0.4.7
The version of IBM Java installed on the remote host is prior to 6.1 6.1.8.50 / 7.0 7.0.10.10 / 7.1 7.1.4.10 / 8.0 8.0.4.7. It is, therefore, affected by a vulnerability as referenced in the IBM Security Update August 2017 advisory. - A flaw in the IBM J9 VM class verifier allows untrusted code t...
Adobe Acrobat 2017 Security Update (APSB22-16) - Mac OS X
Adobe Acrobat Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
Adobe Reader 2017 Security Update (APSB22-16) - Windows
Adobe Acrobat Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...
Security Bulletin: IBM InfoSphere Master Data Management is vulnerable to OpenSSLvulnerability (CVE-2017-3735)
Summary IBM InfoSphere Master Data Management is vulnerable to OpenSSL vulnerability that could allow an attacker to obtain sensitive information by triggering an out-of-bounds read and resulting in the incorrect text display of the certificate. Vulnerability Details CVEID: CVE-2017-3735...
livingthelifeinsouthwestflorida.com Cross Site Scripting vulnerability OBB-2561839
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2017-3615 affecting package libdb for versions less than 5.3.28-7
CVE-2017-3615 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...
CVE-2017-3612 affecting package libdb for versions less than 5.3.28-7
CVE-2017-3612 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...
CVE-2017-3610 affecting package libdb for versions less than 5.3.28-7
CVE-2017-3610 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...
CVE-2017-3609 affecting package libdb for versions less than 5.3.28-7
CVE-2017-3609 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...
CVE-2017-3605 affecting package libdb for versions less than 5.3.28-7
CVE-2017-3605 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...
CVE-2017-3604 affecting package libdb for versions less than 5.3.28-7
CVE-2017-3604 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...