279 matches found
OPENSUSE-SU-2021:0176-1 Security update for python-autobahn
This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection boo1180570. This update was imported from the openSUSE:Leap:15.1:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project...
UBUNTU-CVE-2021-26272
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space in the Autolink plugin...
SUSE-SU-2021:0041-1 Security update for tomcat
This update for tomcat fixes the following issue: - CVE-2020-17527: Fixed a HTTP/2 request header mix-up bsc1179602...
OPENSUSE-SU-2020:1997-1 Security update for blueman
This update for blueman fixes the following issues: - Update to version 2.1.4 CVE-2020-15238: Fixed a local denial-of-service in the D-Bus interface boo1178196...
OPENSUSE-SU-2020:1814-1 Security update for singularity
This update for singularity fixes the following issues: Update to new version 3.6.4: - CVE-2020-15229: Due to insecure handling of path traversal and the lack of path sanitization within unsquashfs, it is possible to overwrite/create files on the host filesystem during the extraction of a crafted...
OPENSUSE-SU-2020:1497-1 Security update for singularity
This update for singularity fixes the following issues: New version 3.6.3, addresses the following security issues: - CVE-2020-25039, boo1176705 When a Singularity action command run, shell, exec is run with the fakeroot or user namespace option, Singularity will extract a container image to a...
CVE-2020-9722
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2020-14500
creationtimestamp| type| source ---|---|--- 2020-07-29 13:18:51+00:00| seen| https://t.me/thehackernews/786 2020-07-29 18:15:25+00:00| seen| https://t.me/truesecator/802 2020-07-29 21:40:39+00:00| seen| https://t.me/YemenShield/120 2020-07-31 07:51:27+00:00| seen| https://t.me/cKure/1568...
CVE-2020-9437
SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS...
CVE-2020-0534
creationtimestamp| type| source ---|---|--- 2020-06-17 07:55:27+00:00| seen| https://t.me/cibsecurity/12787...
CVE-2020-6443
Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...
OPENSUSE-SU-2020:0331-1 Security update for postgresql10
This update for postgresql10 fixes the following issues: PostgreSQL was updated to version 10.12. Security issue fixed: - CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985. This update was imported from the SUSE:SLE-15:Update update project...
UBUNTU-CVE-2020-6622
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...
CVE-2007-0899
creationtimestamp| type| source ---|---|--- 2019-11-06 07:38:14+00:00| seen| https://t.me/cibsecurity/7905 2024-02-05 08:11:57+00:00| seen| https://t.me/ctinow/179020...
SUSE-SU-2017:2356-1 Security update for postgresql96
This update for postgresql96 fixes the following issues: CVE-2017-7547: Further restrict visibility of pgusermappings.umoptions, to protect passwords stored as user mapping options. bsc1051685 CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. bsc1051684...
CVE-2015-2264
CVE-2015-2264 involves untrusted search path vulnerabilities in Telerik Analytics Monitor Library (EQATEC.Analytics.Monitor.Win32_vc100.dll and Win32_vc100-x64.dll) used by Elipse E3. The root cause is loading Trojan horse DLLs (csunsapi.dll, swift.dll, nfhwcrhk.dll, or surewarehook.dll) from an ...
CVE-2014-1442
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command...
CVE-2012-2938
creationtimestamp| type| source ---|---|--- 2012-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18871...