108 matches found
[SECURITY] [DSA 4962-1] ledgersmb security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4962-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 23, 2021 https://www.debian.org/security/faq -...
CVE-2021-3693
LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure...
CVE-2021-3693 Cross-site Scripting (XSS) - DOM in ledgersmb/ledgersmb
LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure...
CVE-2021-3693
LedgerSMB vulnerabilities (CVE-2021-3693 among others) arise from LedgerSMB not checking the origin of HTML fragments, enabling an authenticated user to receive a specially crafted URL that could lead to remote code execution or information disclosure. Public docs cover multiple advisories across...
SUSE SLES11 Security Update : mailman (SUSE-SU-2019:14230-1)
The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2019:14230-1 advisory. - A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15....
CVE-2020-3693
u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017,...
CVE-2020-3693
Summary: CVE-2020-3693 describes a pointer out-of-range issue caused by an incorrect buffer range check in qseecom, affecting multiple Snapdragon platforms (APQ8009/8017/8053/8098, Bitra, MSM8909W/8996AU, Nicobar, QCM2150, QCS605, Saipan, SDM429W, SDX20, SM6150/8150/8250, SXR2130, etc.). The root...
Security update for mailman (moderate)
openSUSE Security Update: Security update for mailman Announcement ID: openSUSE-SU-2020:0156-1 Rating: moderate References: 1154328 Cross-References: CVE-2019-3693 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update fo...
openSUSE: Security Advisory for mailman (openSUSE-SU-2020:0148_1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : mailman (openSUSE-2020-148)
This update for mailman fixes the following issues : - CVE-2019-3693: Fixed a privilege escalation during package install. Could be exploited by a local users who is members of the the mailman group. boo1154328 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...
CVE-2019-3693
A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privileges from user wwwrun to root. Additionally arbitrary files could be changed to group mailman. This...
CVE-2019-3693 Local privilege escalation from user wwwrun to root in the packaging of mailman
A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privileges from user wwwrun to root. Additionally arbitrary files could be changed to group mailman. This...
CVE-2019-3693
CVE-2019-3693 is a local privilege-escalation flaw in the mailman packaging for SUSE SLES 11/12 and openSUSE Leap 15.1. A symlink-following vulnerability during package installation could allow a local attacker (wwwrun group) to escalate to root and potentially alter files to the mailman group. A...
RHEL 7 : kernel-alt (RHSA-2020:0174)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0174 advisory. The kernel-alt packages provide the Linux kernel version 4.x. Security Fixes: Kernel: speculative bounds check bypass store CVE-2018-3693...
Important: Red Hat Security Advisory: kernel-alt security and bug fix update
An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
SUSE SLES12 Security Update : mailman (SUSE-SU-2019:3076-1)
This update for mailman fixes the following issues : CVE-2019-3693: Fixed a local privilege escalation from wwwrun to root bsc1154328. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...
SUSE-SU-2019:3076-1 Security update for mailman
This update for mailman fixes the following issues: - CVE-2019-3693: Fixed a local privilege escalation from wwwrun to root bsc1154328...
SUSE-SU-2019:14230-1 Security update for mailman
This update for mailman fixes the following issues: - CVE-2019-3693: Fixed a local privilege escalation from wwwrun to root bsc1154328...
RHEL 7 : kernel (RHSA-2019:1946)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1946 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An industry-wide issue was found in th...
CVE-2018-3690
CVE-2018-3690 is a merged placeholder entry, refocused on CVE-2018-3693. The CVE-2018-3690 record states it is merged into CVE-2018-3693 and should reference CVE-2018-3693 for details. Connected documentation provides concrete information for CVE-2018-3693 (Spectre-NG Variant 1.1: bounds check by...