Update jQuery to avoid CVE-2020-11022, CVE-2020-11023, and CVE-2015-9251

Crowd was using jQuery version 1.8.3, which is affected by CVE-2020-11023, CVE-2020-11022, and CVE-2015-9251. Affected Version/s: 4.0.3, 4.1.1 Fixed Version/s: 4.1.2, 4.0.4, 4.2.0...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2020-4576)

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager version 4.2. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed ...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2020-4578)

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager version 4.2. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed ...

CVE-2018-19665 affecting package qemu-kvm 4.2.0-22

CVE-2018-19665 affecting package qemu-kvm 4.2.0-22. A patched version of the package is available...

CVE-2020-25743 affecting package qemu-kvm 4.2.0-48

CVE-2020-25743 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-10761 affecting package qemu-kvm 4.2.0-48

CVE-2020-10761 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-12829 affecting package qemu-kvm 4.2.0-48

CVE-2020-12829 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-13253 affecting package qemu-kvm 4.2.0-48

CVE-2020-13253 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-26225 Reflected XSS in PrestaShop Product Comments

In PrestaShop Product Comments before version 4.2.0, an attacker could inject malicious web code into the users' web browsers by creating a malicious link. The problem was introduced in version 4.0.0 and is fixed in 4.2.0...

Reflected XSS with parameters in PostComment

Impact An attacker could inject malicious web code into the users' web browsers by creating a malicious link. Patches The problem is fixed in 4.2.0 References Cross-site Scripting XSS - Reflected CWE-79...

GHSA-58W4-W77W-QV3W Reflected XSS with parameters in PostComment

Impact An attacker could inject malicious web code into the users' web browsers by creating a malicious link. Patches The problem is fixed in 4.2.0 References Cross-site Scripting XSS - Reflected CWE-79...

CVE-2017-14167 affecting package qemu-kvm 4.2.0-13

CVE-2017-14167 affecting package qemu-kvm 4.2.0-13. A patched version of the package is available...

CVE-2020-13659 affecting package qemu-kvm 4.2.0-48

CVE-2020-13659 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-7039 affecting package qemu-kvm 4.2.0-48

CVE-2020-7039 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

KPMCore: Root privilege escalation

Background KPMcore, the KDE Partition Manager core, is a library for examining and modifying partitions, disk devices, and filesystems on a Linux system. It provides a unified programming interface over top of external system-manipulation tools. Description Improper checks on the D-Bus request...

CVE-2019-19885

In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization. This affects COM465IP, COM465DP, COM465ID, CP700, CP907, and CP915 devices before 4.2.0...

CVE-2016-7161 affecting package qemu-kvm 4.2.0-13

CVE-2016-7161 affecting package qemu-kvm 4.2.0-13. A patched version of the package is available...

Oracle Linux 8 : container-tools:ol8 (ELSA-2020-0348)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0348 advisory. - Fix CVE-2019-10214 1734653. - addresses CVE-2019-18466 - drop upstreamed CVE-2019-10214 patch - Fix CVE-2019-10214 1734649. - rebuild because of CVE-2019-9512...

CVE-2020-4587

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is shipped with, or a required product for, IBM Tivoli Network Manager IP Edition (CVE-2020-4449)

Summary IBM WebSphere Application Server is shipped with IBM Tivoli Network Manager version 4.1.1 and version 3.9; IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager version 4.2. Information about a security vulnerability affecting IBM WebSphere Application Serv...