SUSE-SU-2020:1084-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATEHOSTR1 to store r1 state in kvmppchventry plus in kvmppcsave,restoretm, leading to a...

OPENSUSE-SU-2020:0543-1 Security update for the Linux Kernel

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-11669: An issue was discovered on the powerpc platform. arch/powerpc/kernel/idlebook3s.S did not have save/restore functionality for PNVPOWERSAVEAMR,...

CVE-2020-9458

In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users with minimal privileges to export submitted form data and settings via classrmformcontroller.php rmformexport...

CVE-2020-9458

The CVE-2020-9458 issue affects the WordPress RegistrationMagic plugin (versions up to 4.6.0.3). The export function in class_rm_form_controller.php rm_form_export can be exploited by remote authenticated users with minimal privileges to export submitted form data and settings. This creates poten...

CVE-2015-9458

creationtimestamp| type| source ---|---|--- 2019-10-10 20:36:24+00:00| seen| https://t.me/cibsecurity/7359...

CVE-2015-9458

The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pkstt2dbgetpopularterms count parameter exploitable via CSRF...

CVE-2015-9458

The CVE-2015-9458 entry concerns the WordPress plugin SearchTerms Tagging 2 (up to v1.535). A SQL injection is possible via the pk_stt2_db_get_popular_terms count parameter and is exploitable through CSRF, as described in multiple sources (NVD, RH/Red Hat, CNVD, PRION, CVE List, WPVulnDB). The vu...

CVE-2015-9458

The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pkstt2dbgetpopularterms count parameter exploitable via CSRF...

CVE-2019-9458

CVE-2019-9458 is a Linux kernel video driver use-after-free caused by a race condition, leading to local privilege escalation without user interaction. Multiple connected advisories confirm the issue exists in the Android/Linux kernel/video driver stack and note kernel fixes are needed; no public...

CVE-2019-9458

In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9458

In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege revealing the user's keypresses while the screen was locked with no additional executio...

CVE-2018-9458

The CVE-2018-9458 issue affects Android 8.0–8.1, rooted in computeFocusedWindow/RootWindowContainer.java where focus can be on the wrong window, enabling interception of keypresses and local elevation of privilege with user interaction required for exploitation. This could expose user keystrokes ...

CVE-2017-9458

XML external entity XXE vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to obtain sensitive information, cause a denial of service, or...

CVE-2017-9458

XML external entity XXE vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to obtain sensitive information, cause a denial of service, or...

CVE-2017-9458

Vulnerability: XML External Entity (XXE) in PAN-OS GlobalProtect internal/external gateway interface.Affected versions: PAN-OS 6.1.x <= 6.1.17, 7.0.x <= 7.0.16, 7.1.x <= 7.1.11, and 8.0.x

XML External Entity (XXE) in PAN-OS

A vulnerability exists in PAN-OS’s GlobalProtect internal and external gateway interface that could allow for XML External Entity XXE attack. PAN-OS does not properly parse XML input. Ref PAN-75688 / CVE-2017-9458 Successful exploitation of this issue may allow disclosure of information, denial o...

CVE-2016-9458

...

CVE-2016-9458

CVE-2016-9458 is rejected; this candidate was not associated with any vulnerability and is not active.

CVE-2014-9458

Hex-Rays IDA Pro before version 6.6 cumulative fix (2014-12-24) is affected by a heap-based buffer overflow in the GDB debugger module. This vulnerability could allow remote GDB servers to cause an unspecified impact via unknown vectors. Remediation: upgrade to IDA Pro 6.6 or later (per reference...

Fedora Update for gfs2-utils FEDORA-2008-9458

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...