openSUSE: Security Advisory for nodejs8 (openSUSE-SU-2020:0802-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 7 / 8 : Red Hat OpenShift Service Mesh (RHSA-2020:2362)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2362 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh security update

An update for jaeger, kiali, and servicemesh-grafana is now available for OpenShift Service Mesh 1.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

AZL-44115 CVE-2020-7598 affecting package js-jquery 3.5.0-4

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload...

DEBIAN-CVE-2020-7598

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload...

CVE-2020-7598

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload...

CVE-2020-7598

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload...

CVE-2020-7598

CVE-2020-7598 : Root cause is a prototype pollution flaw in the minimist module before version 1.2.2, allowing an attacker to add or modify properties on Object.prototype via a constructor or proto payload. Connected advisories (MiracleLinux/AXSA entries) explicitly reference nodejs-minimist as a...

CVE-2020-7598

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload...

CVE-2020-7598

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload...

CVE-2015-7598

The CVE-2015-7598 entry concerns SafeNet Authentication Service TokenValidator Proxy Agent. Affected component: the TokenValidator Proxy Agent. Root cause: uses a weak ACL for unspecified installation directories and executable modules, enabling a local user to gain privileges by modifying an exe...

openSUSE Security Update : tiff (openSUSE-2017-1118)

This update for tiff to version 4.0.8 fixes a several bugs and security issues : These security issues were fixed : - CVE-2017-7595: The JPEGSetupEncode function allowed remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted image bsc1033127. -...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2017:2569-1)

This update for tiff to version 4.0.8 fixes a several bugs and security issues: These security issues were fixed : - CVE-2017-7595: The JPEGSetupEncode function allowed remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted image bsc1033127. -...

Fedora 26 : libtiff (2017-d95dacdfbf)

Security fix for : - CVE-2017-7592 - CVE-2017-7593 - CVE-2017-7594 - CVE-2017-7595 - CVE-2017-7596 - CVE-2017-7597 - CVE-2017-7598 - CVE-2017-7599 - CVE-2017-7600 - CVE-2017-7601 - CVE-2017-7602 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 25 : libtiff (2017-021bebae25)

Security fix for : - CVE-2017-7592 - CVE-2017-7593 - CVE-2017-7594 - CVE-2017-7595 - CVE-2017-7596 - CVE-2017-7597 - CVE-2017-7598 - CVE-2017-7599 - CVE-2017-7600 - CVE-2017-7601 - CVE-2017-7602 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora Update for libtiff FEDORA-2017-021bebae25

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-7598

CVE-2017-7598 affects LibTIFF 4.0.7 where a crafted TIFF image can trigger a division-by-zero in TIFFReadDirEntryCheckedRational/TIFFReadDirEntryCheckedSrational, leading to denial of service. This is part of multiple libtiff issues reported in 2017 across distributions. The vulnerability stems f...

CVE-2016-7598

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process...

CVE-2016-7598

CVE-2016-7598 refers to a WebKit memory-disclosure flaw in Apple products (iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, iTunes before 12.5.4). Exploitation could allow remote attackers to obtain sensitive information from process memory via a crafted web site. Connected advisories in...

CVE-2014-7598

The CVE-2014-7598 entry concerns the Android app The Poker Puzzle (com.sharpiq.pokerpuzzle) 1.0.0. The linked documents confirm a vulnerability in which the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive informat...