Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

RHEL 9 : thunderbird (RHSA-2023:6192)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6192 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.4.1. Security Fixes: libvpx: crash...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6192-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6192-1 advisory. Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of- bounds write vulnerability. An attacker could us...

CVE-2020-6192

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root privileges in SAP Host Agent via SAP Landscape Management...

CVE-2020-6192

CVE-2020-6192 affects SAP Landscape Management, version 3.0. The vulnerability allows an attacker with admin privileges to run malicious commands with root privileges on the SAP Host Agent via SAP Landscape Management. CNVD cites an input validation error as the underlying issue; other sources re...

Lenovo Power Management Driver 1.67.17.48 - pmdrvs.sys Denial of Service (PoC)

Lenovo Power Management Driver 1.67.17.48 - pmdrvs.sys Denial of Service PoC Exploit Title: Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service PoC Date: 2019-12-11 Exploit Author: Nassim Asrir CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor :...

Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service (PoC)

Exploit Title: Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service PoC Date: 2019-12-11 Exploit Author: Nassim Asrir CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor : https://www.lenovo.com/us/en/ Ref :...

Lenovo Power Management Driver Buffer Overflow

Exploit Title: Lenovo Power Management Driver "pmdrvs.sys" - Buffer Overflow Date: 11/12/2019 Exploit Author: Nassim Asrir Contact: [email protected] | https://www.linkedin.com/in/nassim-asrir-b73a57122/ CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor :...

CVE-2019-6192

A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service...

CVE-2019-6192

CVE-2019-6192 affects Lenovo Power Management Driver (pmdrvs.sys) prior to 1.67.17.48. The vulnerability is a buffer overflow when processing IOCTL codes, leading to local denial of service and, per exploit references, potential kernel-space impact. Public PoC content exists (PoC in Exploit-DB an...

Lenovo Power Management Driver Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-29334 Potential Impact: Denial of Service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6192 Summary Description: A potential vulnerability has been reported in the Lenovo Power Management Driver which could lead to a denial of service...

Lenovo Power Management Driver Vulnerability - Lenovo Support US

No description provided...

Debian: Security Advisory (DLA-1838-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4334-1 : mupdf - security update

Multiple vulnerabilities were discovered in MuPDF, a PDF, XPS, and e-book viewer which could result in denial of service or the execution of arbitrary code if malformed documents are opened. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

[SECURITY] [DSA 4334-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4334-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 04, 2018 https://www.debian.org/security/faq -...

Security BULLETIN: IBM Cúram Social Program Management is vulnerable to cross site scripting attack(CVE-2014-6192).

Summary IBM Cúram Social Program Management is vulnerable to a cross site scripting attack. Vulnerability Details CVEID: CVE-2014-6192 DESCRIPTION: Cúram Social Program Management is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could...

[ASA-201805-12] zathura-pdf-mupdf: multiple issues

Arch Linux Security Advisory ASA-201805-12 ========================================== Severity: High Date : 2018-05-16 CVE-ID : CVE-2018-5686 CVE-2018-6187 CVE-2018-6192 CVE-2018-6544 CVE-2018-1000051 Package : zathura-pdf-mupdf Type : multiple issues Remote : Yes Link :...

[ASA-201805-8] llpp: multiple issues

Arch Linux Security Advisory ASA-201805-8 ========================================= Severity: High Date : 2018-05-10 CVE-ID : CVE-2018-5686 CVE-2018-6187 CVE-2018-6192 CVE-2018-6544 CVE-2018-1000051 Package : llpp Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-690...

Solaris 10 (sparc) : 124301-16

Portal Server 7.1 Update 2 Solaris sparc: Maintenance Update Rel. Date this patch was last updated by Sun : Jan/31/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Fedora 27 : mupdf (2018-da6f76b446)

CVE-2018-6192 CVE-2018-6544 CVE-2018-1000051 CVE-2018-6187 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...