CVE-2018-14519

CVE-2018-14519 affects Kirby 2.5.12. The delete page functionality is vulnerable to cross-site request forgery (CSRF): a remote attacker can craft a malicious page that causes a user to delete a page. This is the vulnerability described across multiple sources (Kirby CMS context). The material no...

CVE-2018-14520

An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages...

CVE-2018-14520

CVE-2018-14520 affects Kirby CMS version 2.5.12. The vulnerability allows malicious HTTP requests to prompt a user to add web pages, indicating an issue likely related to input handling and request authenticity. The NVD CVSSv3.1 base score is 5.4 (Medium) with Network attack vector, Low attack co...

Design/Logic Flaw

A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...

Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak

Summary Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak Vulnerability Details CVEID:CVE-2021-3121 DESCRIPTION: An unspecified error with the lack of certain index validation, aka the skippy peanut butter issue in GoGo Protobuf has an...

Security Bulletin: IBM WebSphere MQ Clients connecting to a Queue Manager could cause a SIGSEGV in the Channel process amqrmppa. (CVE-2018-1374)

Summary A client connecting to a IBM MQ or IBM WebSphere MQ Queue Manager could cause a SIGSEGV in the channel process amqrmppa. Vulnerability Details CVEID: CVE-2018-1374 DESCRIPTION: A IBM WebSphere MQ Client connecting to a Queue Manager could cause a SIGSEGV in the Channel process amqrmppa...

Security Bulletin: IBM MQ Advanced Message Security is vulnerable to an OpenSSL error while parsing an ASN.1 data. (CVE-2018-0739)

Summary IBM MQ have addressed a vulnerability whereby OpenSSL could allow a remote attacker to execute a denial of service attack by sending specially crafted ASN.1 data. OpenSSL is used by IBM MQ Advanced Message Security on the IBM i platform only. Vulnerability Details CVEID: CVE-2018-0739...

CVE-2018-19986

creationtimestamp| type| source ---|---|--- 2022-08-17 11:00:04+00:00| seen| https://t.me/poxek/2291...

[slackware-security] mariadb

New mariadb packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mariadb-10.5.17-i586-1slack15.0.txz: Upgraded. This update fixes bugs and several security issues. For more information, see:...

dotCMS Arbitrary File Upload (CVE-2022-26352; CVE-2018-5445)

An arbitrary file upload vulnerability exists in dotCMS. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the vulnerable system with administrative privileges...

Security Bulletin: IBM i is affected by networking BIND vulnerabilities CVE-2018-5744 CVE-2019-6465 and CVE-2018-5745.

Summary ISC BIND is vulnerable to these security vulnerabilities. IBM i has addressed these vulnerabilities. This security bulletin has been updated, on June 21, 2019, as an additional IBM i PTF is available for IBM i 7.4. Vulnerability Details CVEID: CVE-2018-5745 DESCRIPTION: ISC BIND is...

MariaDB 10.7.0 < 10.7.5 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.7.5. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.7.5 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a deni...

WinRAR <= 5.61 Absolute Path Traversal Vulnerability

WinRAR is prone to an absolute path traversal vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

D-Link DIR-818LW Command Injection (CVE-2018-19986)

A command injection vulnerability exists in D-Link DIR-818LW. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

MariaDB 10.6.0 < 10.6.9 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.6.9 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a deni...

MariaDB 10.9.0 < 10.9.2 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.9.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.9.2 advisory. - MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at...

DNN (DotNetNuke) < 9.3.0 Multiple Vulnerabilities

DNN formerly DotNetNuke is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DNN (DotNetNuke) 9.2.x < 9.2.2 Multiple Vulnerabilities

DNN formerly DotNetNuke is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WibuKey Network Server Management Heap Overflow (CVE-2018-3991)

A heap overflow vulnerability exists in WibuKey Network Server Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

MariaDB 10.5.0 < 10.5.17 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.5.17. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.5.17 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a...