Tiki Wiki CMS Groupware 24.0 grid.php PHP Object Injection

----------------------------------------------------------------------------- Tiki Wiki CMS Groupware const popChain = 'O:25:"SearchElasticConnection":1:S:31:"\0...

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM SPSS Statistics

Summary There is a vulnerability in IBM® Runtime Environment Java™ Versions 7.0, 7.1, and 8.0 used by IBM SPSS Statistics. IBM SPSS Statistics has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-27221 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a stack-based buffer overflow...

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM SPSS Statistics

Summary There is a vulnerability in IBM® Runtime Environment Java™ Versions 7.0, 7.1, and 8.0 used by IBM SPSS Statistics. IBM SPSS Statistics has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-2989 DESCRIPTION: An unspecified vulnerability in Java SE could allow an...

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM SPSS Statistics

Summary There is a vulnerability in IBM® Runtime Environment Java™ Versions 7.0, 7.1, and 8.0 used by IBM SPSS Statistics. IBM SPSS Statistics has addressed the applicable CVE. This CVE affects the windows platform only. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SDK, Java...

CVE-2019-13417

Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names but not values for fields which are not allowed for the user when field level security FLS is activated...

CVE-2020-3713

CVE-2020-3713 affects Adobe Illustrator CC up to version 24.0. A memory corruption vulnerability could allow arbitrary code execution under the current user. Connected sources confirm the issue is real and tied to Illustrator CC 24.0 and earlier. The advisory APSB20-03 indicates a patch/update to...

CVE-2020-3712

CVE-2020-3712 affects Adobe Illustrator CC (Windows) in version 24.0 and earlier. The issue is a memory corruption vulnerability that could allow arbitrary code execution when exploited locally with user interaction. The related advisories describe a memory-corruption flaw impacting Illustrator C...

CVE-2020-3711

CVE-2020-3711 affects Adobe Illustrator CC up to version 24.0 (Windows). The root cause is memory corruption in Illustrator, which could allow arbitrary code execution under the current user if exploited. Adobe’s APSB20-03 advisory and Threatpost report indicate updating to version 24.0.2 (or new...

CVE-2020-3710

Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-13418

Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized...

CVE-2019-13417

Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names but not values for fields which are not allowed for the user when field level security FLS is activated...

PT-2019-13330 · Floragunn · Search Guard

Name of the Vulnerable Software and Affected Versions: Search Guard versions prior to 24.0 Description: The issue concerns the improper anonymization of string array values in documents. This affects the confidentiality of the data, as sensitive information may not be properly protected...

PT-2019-13329 · Floragunn · Search Guard

Name of the Vulnerable Software and Affected Versions: Search Guard versions prior to 24.0 Description: The issue concerns field caps and mapping API leaking field names, but not values, for fields that are not allowed for the user when field level security FLS is activated. This occurs in Search...

Rockwell Automation 1336 PLUS II Drv 24.0 A, 575V 1336F-CWF200 Smart MCC

Binary data 754446.prm...

Rockwell Automation 1336 PLUS Drive 24.0 A, 575V 1336S-CWF200 Smart MCC

Binary data 754263.prm...

Rockwell Automation 1336 PLUS II Drv 24.0 A, 460V 1336F-BRF150 Smart MCC

Binary data 754302.prm...

Rockwell Automation 1336 PLUS Drive 24.0 A, 575V 1336S-C020 Smart MCC

Binary data 754328.prm...

Rockwell Automation 1336 PLUS II Drv 24.0 A, 575V 1336F-C020 Smart MCC

Binary data 754455.prm...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2013:1495-1)

This MozillaThunderbird update to version 24.0 fixes several security and non-security issues : - update to Thunderbird 24.0 bnc840485 - MFSA 2013-76/CVE-2013-1718/CVE-2013-1719 Miscellaneous memory safety hazards - MFSA 2013-77/CVE-2013-1720 bmo888820 Improper state in HTML5 Tree Builder with...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2013:1493-1)

This MozillaFirefox update to version 24.0 fixes several security and non-security issues : - move greek to the translations-common package bnc840551 - update to Firefox 24.0 bnc840485 - MFSA 2013-76/CVE-2013-1718/CVE-2013-1719 Miscellaneous memory safety hazards - MFSA 2013-77/CVE-2013-1720...