OPENSUSE-SU-2022:0046-1 Security update for sphinx

sphinx was updated to fix the following issues: - CVE-2020-29050: SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file i...

Debian DLA-2882-1 : sphinxsearch - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2882 advisory. - SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL...

[SECURITY] [DLA 2882-1] sphinxsearch security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2882-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 17, 2022 https://wiki.debian.org/LTS -...

CVE-2020-29050

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc directory. NOTE: this is unrelated to CMUSphinx...

CVE-2020-29050

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc directory. NOTE: this is unrelated to CMUSphinx...

CVE-2020-29050

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc directory. NOTE: this is unrelated to CMUSphinx...

CVE-2020-29050

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc directory. NOTE: this is unrelated to CMUSphinx...

CVE-2020-29050

CVE-2020-29050 affects SphinxSearch in Sphinx Technologies Sphinx up to version 3.1.1, enabling directory traversal via the mysql client for CALL SNIPPETS and load_file with full pathnames (unrelated to CMUSphinx). The issue, often discussed with CVE-2019-14511, has been addressed in multiple Lin...

Debian DSA-5036-1 : sphinxsearch - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dsa-5036 advisory. - SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL...

[SECURITY] [DSA 5036-1] sphinxsearch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5036-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 06, 2022 https://www.debian.org/security/faq -...

aax-fe-sin.amazon-adsystem.com Open Redirect vulnerability

Vulnerable URL: http://aax-fe-sin.amazon-adsystem.com/x/c/QsCxVJ0Z0vf-PFdDVcErtpkAAAFYEX-yIQUAAAV4Ab97Myc/http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 29050 VIP website...

arkansas.gov XSS vulnerability

Vulnerable URL: http://www.arkansas.gov/search?q=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 29050 Google...