About the security content of Apple Music 3.4.0 for Android - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2020-4491

IBM Spectrum Scale V4.2.0.0 through V4.2.3.22 and V5.0.0.0 through V5.0.5 could allow a local attacker to cause a denial of service by sending a large number of RPC requests to the mmfsd daemon which would cause the service to crash. IBM X-Force ID: 181991...

USN-4577-1: Linux kernel vulnerabilities

Hadar Manor discovered that the DCCP protocol implementation in the Linux kernel improperly handled socket reuse, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-16119 Giuseppe Scriva...

Ubuntu: Security Advisory (USN-4577-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL injection vulnerability in SearchController

PMASA-2020-6 Announcement-ID: PMASA-2020-6 Date: 2020-10-10 Summary SQL injection vulnerability in SearchController Description An SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL i...

Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt

In bcrypt npm package before version 5.0.0, data is truncated wrong when its length is greater than 255 bytes...

Ubuntu: Security Advisory (USN-4462-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

CVE-2020-14162

An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core script as root without a password, which could allow an attacker to obtain root access via shell metacharacters to this script's setdns command...

Ubuntu: Security Advisory (USN-4439-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Savsoft Quiz 5 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Savsoft Quiz 5 - Persistent Cross-Site Scripting Exploit Author: Ogulcan Unverenth3d1gger Vendor Homepage: https://savsoftquiz.com/ Software Link: https://github.com/savsofts/savsoftquizv5.git Version: 5.0 Tested on: Kali Linux...

SUSE SLED15 / SLES15 Security Update : freetds (SUSE-SU-2020:1417-2)

This update for freetds to 1.1.36 fixes the following issues : Security issue fixed : CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 bsc1141132. Non-security issues fixed : Enabled Kerberos support Version update ...

Savsoft Quiz 5 - Persistent Cross-Site Scripting

Exploit Title: Savsoft Quiz 5 - Persistent Cross-Site Scripting Date: 2020-07-09 Exploit Author: Ogulcan Unverenth3d1gger Vendor Homepage: https://savsoftquiz.com/ Software Link: https://github.com/savsofts/savsoftquizv5.git Version: 5.0 Tested on: Kali Linux ---Vulnerable Source Code---- functio...

Pi-hole Web Interface < 5.1 Multiple Vulnerabilities

The Pi-hole Web Interface previously AdminLTE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2020-14971

CVE-2020-14971 affects Pi-hole up to version 5.0, enabling code injection in the piholedhcp component (Static DHCP Leases) by tampering Teleporter backup archives. An attacker can request a limited backup via teleporter.php, receive a .tar.gz, modify the host parameter in dnsmasq.d files inside t...

Ubuntu: Security Advisory (USN-4388-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cayin Digital Signage System xPost 2.5 - Remote Command Injection Exploit

Exploit for multiple platform in category web applications Title: Cayin Digital Signage System xPost 2.5 - Remote Command Injection Author:LiquidWorm Vendor: https://www.cayintech.com CVE: N/A !/usr/bin/env python3 Cayin Digital Signage System xPost 2.5 Pre-Auth SQLi Remote Code Execution Vendor:...

Security update for freetds (moderate)

openSUSE Security Update: Security update for freetds Announcement ID: openSUSE-SU-2020:0741-1 Rating: moderate References: 1141132 Cross-References: CVE-2019-13508 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for freetds ...

CVE-2020-4358

CVE-2020-4358 affects IBM Spectrum Scale 5.0.0.0 through 5.0.4.4, where the Web UI is vulnerable to cross-site scripting, enabling injection of arbitrary JavaScript that can lead to credentials disclosure within a trusted session. IBM Security Bulletins for Spectrum Scale GUI and ESS cite a fix: ...