Security update for hiawatha (important)

openSUSE Security Update: Security update for hiawatha Announcement ID: openSUSE-SU-2019:0322-1 Rating: important References: 1125751 Cross-References: CVE-2019-8358 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description: This update for...

openSUSE: Security Advisory for hiawatha (openSUSE-SU-2019:0294-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : hiawatha (openSUSE-2019-294)

This update for hiawatha to version 10.8.4 fixes the following issue : Security issue fixed : - CVE-2019-8358: Fixed a vulnerability which allowed a remote atacker to perform directory traversal when AllowDotFiles was enabled bsc1125751. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Security update for hiawatha (important)

openSUSE Security Update: Security update for hiawatha Announcement ID: openSUSE-SU-2019:0294-1 Rating: important References: 1125751 Cross-References: CVE-2019-8358 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for hiawath...

CVE-2019-8358

In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled...

CVE-2019-8358

Hiawatha web server (before 10.8.4) is affected by CVE-2019-8358. If AllowDotFiles is enabled, a remote attacker can perform directory traversal. The issue is addressed in version 10.8.4 (and related advisories), which fixes the vulnerability by preventing unauthorized traversal. Open-source advi...

CVE-2018-8358

A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests, aka "Microsoft Edge Security Feature Bypass Vulnerability." This affects Microsoft Edge...

CVE-2018-8358

CVE-2018-8358 is a security feature bypass in Microsoft Edge caused by improper handling of redirect requests, allowing bypass of CORS redirect restrictions and potential data leakage through redirects to attacker‑controlled destinations. Public references (NVD/MSRC) confirm Edge as affected and ...

CVE-2014-8358

CVE-2014-8358 affects Huawei EC156/EC176/EC177 USB Modem firmware/software prior to UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014) and before V200R003B015D02SP08C1014 (23.015.02.08.1014). The core issue is a weak Access Control List in the Mobile Partner directory that allows a low-privilege u...

openSUSE Security Update : libreoffice (openSUSE-2017-1048)

LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements : Writer : - New 'Go to Page' dialog for quickly jumping to another page. - Support for 'Table Styles'. - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc : - New...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2017:2315-1)

LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements: Writer : - New 'Go to Page' dialog for quickly jumping to another page. - Support for 'Table Styles'. - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc : - New...

LibreOffice 'ReadJPEG' Function Heap Buffer Overflow Vulnerability - Mac OS X

LibreOffice is prone to a heap buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LibreOffice 'ReadJPEG' Function Heap Buffer Overflow Vulnerability - Windows

LibreOffice is prone to a heap buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-8358

LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx...

CVE-2017-8358

LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx...

CVE-2017-8358

LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx...

CVE-2017-8358

CVE-2017-8358 is an out-of-bounds write caused by a heap-based buffer overflow in LibreOffice’s ReadJPEG path (vcl/source/filter/jpeg/jpegc.cxx). Connected sources confirm affected product: LibreOffice; root cause: heap-based overflow in ReadJPEG; impact as stated: out-of-bounds write with potent...

CVE-2016-8358

CVE-2016-8358 concerns Smiths Medical CADD-Solis Medication Safety Software (versions 1.0, 2.0, 3.0, 3.1). The root issue is that the software does not verify identities at communication endpoints, enabling a potential man-in-the-middle to access the communication channel between endpoints. The v...

CVE-2015-8358

The CVE-2015-8358 issue affects the Bitrix bitrix.mpbuilder module prior to 1.0.12. A path traversal/PHP File Inclusion vulnerability exists in the work[] parameter used by /bitrix/admin/bitrix.mpbuilder_step2.php, allowing an authenticated remote attacker to include and execute arbitrary local f...

Bitrix bitrix.mpbuilder Module 1.0.10 - Local File Inclusion

Bitrix bitrix.mpbuilder Module 1.0.10 - Local File Inclusion Advisory ID: HTB23281 Product: bitrix.mpbuilder Bitrix module Vendor: www.1c-bitrix.ru Vulnerable Versions: 1.0.10 and probably prior Tested Version: 1.0.10 Advisory Publication: November 18, 2015 without technical details Vendor...