1692 matches found
[SECURITY] Fedora 34 Update: gnome-desktop3-40~rc-1.fc34
gnome-desktop contains the libgnome-desktop library as well as a data file that exports the "GNOME" version to the Settings Details panel. The libgnome-desktop library provides API shared by several applications on the desktop, but that cannot live in the platform for various reasons. There is no...
Security update for crmsh (important)
openSUSE Security Update: Security update for crmsh Announcement ID: openSUSE-SU-2021:0410-1 Rating: important References: 1154927 1178454 1178869 1179999 1180126 1180137 1180571 1180688 1181415 Cross-References: CVE-2020-35459 CVE-2021-3020 CVSS scores: CVE-2020-35459 NVD : 7.8...
PT-2021-8107 · Htmldoc +3 · Htmldoc +3
Name of the Vulnerable Software and Affected Versions: HTMLDOC version 1.9.12 Description: The issue is related to a heap buffer overflow in the render table row function, located in the ps-pdf.cxx component of the HTMLDOC tool. This overflow can lead to arbitrary code execution and denial of...
Google Forms Set Baseline For Widespread BEC Attacks
A threat actor has been sending thousands of emails to organizations, in what researchers warn is a reconnaissance campaign to identify targets for a possible follow-up business-email-compromise BEC attack. So far, researchers have observed thousands of messages being sent to companies since...
Denial of Service in Apache POI
Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: - Infinite Loops while parsing crafted WMF, EMF, MSG and macros POI bugs 61338 and 61294 - Out of Memory Exceptions while parsing crafted DOC, PPT and XLS POI bugs 52372 and 61295...
Oracle Linux 7 : python-rtslib (ELSA-2020-5435)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5435 advisory. 2.1.74-1.0.1 - Add patch 0005-allow-mixed-case-in-oracle-iqns to fix Orabug: 27613482 - Add patch 0004-allow-underscore-in-oracle-iqns to fix Orabug: 27582660 -...
Scientific Linux Security Update : python-rtslib on SL7.x (noarch) (2020:5435)
The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5435-1 advisory. - python-rtslib: weak permissions for /etc/target/saveconfig.json CVE-2020-14019 Note that Nessus has not tested for this issue but has instead relied onl...
Prototype Pollution
doc-path is vulnerable to prototype pollution. An attacker is able to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...
CVE-2020-7772
CVE-2020-7772 applies to the doc-path package (Node.js). Connected sources confirm a prototype pollution vulnerability affecting doc-path versions prior to 2.3.0 (initially noted as before 2.1.2). Mitigation: upgrade doc-path to 2.3.0 or higher. The issue enables pollution via object prototype mo...
CVE-2020-7772
This affects the package doc-path before 2.1.2...
CVE-2020-7772: Undefined Security Weakness
This affects the package doc-path before 2.1.2...
Fedora 32 : 1:libuv (2020-77b758d6dc)
2020.09.26, Version 1.40.0 Stable Changes since version 1.39.0 : - udp: add UVUDPMMSGFREE recvcb flag Ryan Liptak - include: re-map UVEPROTO from 4046 to -4046 YuMeiJie - doc: correct UVUDPMMSGFREE version added cjihrig - doc: add uvmetricsidletime version metadata Ryan Liptak - win,tty: pass...
The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
...
An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap HandleMap HandleFlowSequence HandleSequence HandleNode. Remote attackers could leverage this vulnerability to cause a denial-of-service via a cpp file.
...
@adeunis/codecs (>=1.3.0, <=1.4.0), @koalarx/utils (>=3.0.7, <=3.0.8) +5 more potentially affected by CVE-2020-7772 via doc-path (>=2.0.0, <=2.2.0)
doc-path NPM version =2.0.0, =1.3.0, =3.0.7, =1.0.5, =3.2.0, =1.1.4, =1.2.3 Source cves: CVE-2020-7772 Source advisory: SNYK:JS-DOCPATH-1011952...
doc-online.de Cross Site Scripting vulnerability OBB-1326487
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
openSUSE Security Update : python (openSUSE-2020-1257)
This update for python fixes the following issues : - CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs bsc1174091. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in...
The vulnerability of the vclmi.dll component in the OpenOffice.org office software suite, specifically LibreOffice, relates to numerical processing errors. This vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.
The vulnerability of the vclmi.dll component in the OpenOffice.org suite of office programs for LibreOffice is related to numerical processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data...
Debian DSA-4660-1 : awl - security update
Andrew Bartlett discovered that awl, DAViCal Andrew's Web Libraries, did not properly handle session management: this would allow a malicious user to impersonate other sessions or users. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
Mozilla: Use-after-free while running the nsDocShell destructor
A flaw was found in Mozilla Firefox. A race condition can occur while running the nsDocShell destructor causing a use-after-free memory issue. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...