Debian: Security Advisory (DSA-4797-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4797-1 : webkit2gtk - security update

The following vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2020-9948 Brendan Draper discovered that processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2020-9951 Marcin Noga discovered that processing maliciously crafted web content...

Debian DSA-4795-1 : krb5 - security update

Demi Obeneour discovered that unbounded recursion in the ASN1 parser of libkrb5 could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4795. The text itself is copyright C Software...

Debian DSA-4794-1 : mupdf - security update

A heap-based buffer overflow flaw was discovered in MuPDF, a lightweight PDF viewer, which may result in denial of service or the execution of arbitrary code if malformed documents are opened. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Debian DSA-4796-1 : thunderbird - security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4796. The text itself is...

Debian DSA-4793-1 : firefox-esr - security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, phishing, cross-site scripting or a DNS rebinding attack. C Tenable Network Security, Inc. The descriptive text and package check...

Debian: Security Advisory (DSA-4793-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4790-1 : thunderbird - security update

A use-after-free was found in Thunderbird, which could potentially result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4790. The text itself is...

Debian: Security Advisory (DSA-4791-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4789-1 : codemirror-js - security update

It was discovered that codemirror, a browser-based text editor implemented in JavaScript, was vulnerable to regular expression denial-of-service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4789. The text...

CVE-2020-24460

Incorrect default permissions in the IntelR DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access...

Design/Logic Flaw

Incorrect default permissions in the IntelR DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-24460

Incorrect default permissions in the IntelR DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-24460

Intel® Driver & Support Assistant (DSA) contains a vulnerability CVE-2020-24460 due to incorrect default permissions in versions before 20.8.30.6. An authenticated user could potentially enable a denial of service via local access. The Intel advisory INTEL-SA-00449 confirms affected products and ...

Debian DSA-4787-1 : moin - security update

Two vulnerabilities were discovered in moin, a Python clone of WikiWiki. - CVE-2020-15275 Catarina Leite discovered that moin is prone to a stored XSS vulnerability via SVG attachments. - CVE-2020-25074 Michael Chapman discovered that moin is prone to a remote code execution vulnerability via the...

Intel® DSA Advisory

Summary: A potential security vulnerability in the Intel® Driver & Support Assistant DSA may allow denial of service. Intel is releasing a software update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-24460 Description: Incorrect default permissions in the Intel...

Debian: Security Advisory (DSA-4786-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4784-1 : wordpress - security update

Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to run insecure deserialization, embed spam, perform various Cross-Site Scripting XSS or Cross-Site Request Forgery CSRF attacks, escalate privileges, run arbitrary code, and delete arbitrary...

Debian DSA-4785-1 : raptor2 - security update

It was discovered that raptor2, an RDF parser library, is prone to heap-based buffer overflow flaws, which could result in denial of service, or potentially the execution of arbitrary code, if a specially crafted file is processed. C Tenable Network Security, Inc. The descriptive text and package...

Debian DSA-4786-1 : libexif - security update

It was discovered that a boundary check in libexif, a library to parse EXIF files, could be optimised away by the compiler, resulting in a potential buffer overflow. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...