Security fix for the ALT Linux 9 package wireshark version 3.2.7-alt1

3.2.7-alt1 built Oct. 5, 2020 Anton Farygin in task 258926 Sept. 30, 2020 Anton Farygin - 3.2.7 - fixes: BLIP dissector crash. CVE-2020-25866 TCP dissector crash. CVE-2020-25862 MIME Multipart dissector crash. CVE-2020-25863...

Security fix for the ALT Linux 10 package wireshark version 3.2.7-alt1

Sept. 30, 2020 Anton Farygin 3.2.7-alt1 - 3.2.7 - fixes: BLIP dissector crash. CVE-2020-25866 TCP dissector crash. CVE-2020-25862 MIME Multipart dissector crash. CVE-2020-25863...

Wireshark 3.2.x < 3.2.7 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.2.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.2.7 advisory. - In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer...

Wireshark 3.2.x < 3.2.7 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.2.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.2.7 advisory. - In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference...

CVE-2020-17476

Mibew Messenger before 3.2.7 allows XSS via a crafted user name...

CVE-2019-16108

phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets CSS token sequence to a page through BBCode...

CVE-2019-16108

phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets CSS token sequence to a page through BBCode...

phpBB Cross-Site Request Forgery Vulnerability (CNVD-2020-19555)

phpBB is a set of open source and PHP-based Web forum software . The software has support for multiple languages , multiple databases and customized layout and so on. A cross-site request forgery vulnerability exists in phpBB 3.2.7, which can be exploited by attackers to delete post attachments...

CVE-2019-16107

Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments...

CVE-2019-16107

Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments...

Cross site request forgery (csrf)

Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments...

CVE-2019-16107

Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments...

SPIP < 3.1.12, 3.2.x < 3.2.7 DB Injection Vulnerability

SPIP is prone to a database injection vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

DEBIAN-CVE-2019-19830

core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...

SPIP content injection vulnerability

SPIP is a Web-based content publishing system. The system is primarily used for online collaboration. A security vulnerability exists in core/plugins/medias in version 3.2.x prior to SPIP 3.2.7. A remote attacker could exploit the vulnerability to inject content into the database...

CVE-2019-13376

phpBB version 3.2.7 allows the stealing of an Administration Control Panel session id by leveraging CSRF in the Remote Avatar feature. The CSRF Token Hijacking leads to stored XSS...

Cross site request forgery (csrf)

phpBB version 3.2.7 allows the stealing of an Administration Control Panel session id by leveraging CSRF in the Remote Avatar feature. The CSRF Token Hijacking leads to stored XSS...

UBUNTU-CVE-2019-13376

phpBB version 3.2.7 allows the stealing of an Administration Control Panel session id by leveraging CSRF in the Remote Avatar feature. The CSRF Token Hijacking leads to stored XSS...

CVE-2019-13376

phpBB version 3.2.7 allows the stealing of an Administration Control Panel session id by leveraging CSRF in the Remote Avatar feature. The CSRF Token Hijacking leads to stored XSS...

Zurmo cross-site scripting vulnerability (CNVD-2019-26160)

Zurmo is the United States Zurmo company's set of PHP-based open source customer relationship management system CRM. A cross-site scripting vulnerability exists in Zurmo version 3.2.7-2. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attack...