CVE-2018-20918

cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster SEC-372...

CVE-2018-20918

cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster SEC-372...

Cross site scripting

cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster SEC-372...

CVE-2018-20918

cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster SEC-372...

CVE-2018-20918

CVE-2018-20918: A stored XSS in cPanel prior to 70.0.23 affects WHM DNS Cluster. Multiple sources (NVD, Red Hat, CNVD, CVE list) reiterate that the vulnerability arises due to insufficient validation of client-side data in the web interface. Impact is contextual to web trust and session data, wit...

CVE-2019-10153

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fencerhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to...

DEBIAN-CVE-2019-10153

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fencerhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to...

CVE-2019-10153

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fencerhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to...

Design/Logic Flaw

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fencerhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to...

CVE-2019-10153

CVE-2019-10153 affects fence-agents prior to version 4.3.4. Multiple advisories (Red Hat, EulerOS, MiracleLinux, NewStart CGSL, Mageia, etc.) document that non‑ASCII characters in a guest VM’s comment/fields can cause fence_rhevm to exit with an exception. In cluster environments this can hinder ...

CVE-2019-10153

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fencerhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to...

httpd: Weak Digest auth nonce generation in mod_auth_digest

In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed...

[SECURITY] Fedora 29 Update: slurm-18.08.8-1.fc29

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

[SECURITY] Fedora 30 Update: slurm-18.08.8-1.fc30

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

Various MySQL Security Updates from July 2018 through January 2019 | Cloud Foundry

Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions Percona Xtradb Cluster release versions prior to 0.15.0 Description Percona Xtradb Cluster release contains several vulnerabilities through its consumption of MySQL. Mitigation Users of affected products are strongly...

Security Bulletin: IBM Cloud Kubernetes Service is affected by Linux Kernel security vulnerabilities (CVE-2019-11477, CVE-2019-11478, CVE-2019-11479)

Summary IBM Cloud Kubernetes Service is vulnerable to CVE-2019-11477, CVE-2019-11478 and CVE-2019-11479 Linux Kernel security vulnerabilities which could result in a denial of service attack. Vulnerability Details CVE-ID: CVE-2019-11477 Description: Linux Kernel is vulnerable to a denial of...

Oracle MySQL Server Component Input Validation Error Vulnerability (CNVD-2019-26679)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component input validation error vulnerability exists in the Shell: Admin / InnoDB Cluster subcomponent of the MySQL Server component in Oracle...

July 16, 2019—KB4507463 (Preview of Monthly Rollup)

None None...

Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019

Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019 Summary This update for Windows Server 2012 and Windows Embedded 8 Standard includes the quality improvements from KB4503263 released June 11, 2019, in addition to these key changes: Addresses an issue that may display...

CVE-2019-10176

A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain static during a user's session. An attacker with the ability to observe the value of this token would be able to re-use the token to perfo...