CVE-2019-25051 affecting package aspell for versions less than 0.60.8-7

CVE-2019-25051 affecting package aspell for versions less than 0.60.8-7. A patched version of the package is available...

sl-7.de Cross Site Scripting vulnerability OBB-3034870

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.1 security update on RHEL 7

New Red Hat Single Sign-On 7.6.1 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Oracle Linux 7 : php-pear (ELSA-2022-7340)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-7340 advisory. 1:1.9.4-23 - update ArchiveTar to 1.4.14 CVE-2020-36193 CVE-2020-28948 CVE-2020-28949 Tenable has extracted the preceding description block directly fr...

RHEL 7 : pcs (RHSA-2022:7343)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7343 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: rubygem-rack: crafted...

RHEL 7 : kernel (RHSA-2022:7337)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7337 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: a use-after-free in clsroute filter...

RHEL 7 : php-pear (RHSA-2022:7340)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:7340 advisory. The php-pear package contains the PHP Extension and Application Repository PEAR, a framework and distribution system for reusable PHP...

RHEL 7 : kernel-rt (RHSA-2022:7338)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7338 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Oracle Linux 7 : kernel (ELSA-2022-7337)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7337 advisory. - debug: lock down kgdb Orabug: 34270798 CVE-2022-21499 - x86/speculation: Add LFENCE to RSB fill sequence Rafael Aquini 2115073 CVE-2022-26373 -...

Oracle Linux 7 : pcs (ELSA-2022-7343)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7343 advisory. 0.9.169-3.0.1 - replace logo pcsd/public/favicon.ico in tarball - remove Source1 HAM-logo.png 0.9.169-3.el73.2 - Update rubygem rack - Upgrade jquery i...

RHEL 7 : kpatch-patch (RHSA-2022:7344)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7344 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Security Fixe...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-9969)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9969 advisory. - ptp: fix the race between the release of ptpclock and cdev Vladis Dronov Orabug: 31350707 CVE-2020-10690 - xfs: add agf freeblocks verify in...

aufkleberfuersie.de Cross Site Scripting vulnerability OBB-3030136

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2022:7184)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:7184-1 advisory. - Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators CVE-2022-39249 - Mozilla:...

CVE-2022-42817

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watchOS 9.1. Visiting a maliciously crafted website may leak sensitive data...

RHEL 7 : Red Hat OpenStack Platform 13.0 (openvswitch2.11) (RHSA-2022:7268)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7268 advisory. Security Fixes: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs CVE-2022-2132 For more details about the security...

AZL-45012 CVE-2022-44081 affecting package zopfli 1.0.3-7

Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail...

CVE-2022-0072

creationtimestamp| type| source ---|---|--- 2022-10-28 00:28:42+00:00| seen| https://t.me/cibsecurity/52170 2022-11-11 11:18:17+00:00| seen| https://t.me/thehackernews/2756 2022-11-11 14:15:05+00:00| seen| https://t.me/truesecator/3695...

CVE-2022-3378

Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory...

Chrome users, you have 3 months to say goodbye to Windows 7 and 8.1

After keeping Chrome running on early Windows versions for two extra years, giving IT administrators time to update, Google has decided it won't delay any further: Unless organizations upgrade to Windows 10 or 11 next year, they won't be able to use Chrome. Browsers based on Chrome, such as Brave...