4799 matches found
ALPINE-CVE-2020-8617
Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows or successfully guesses the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration doe...
Open Sesame - A Tool Which Runs To Display Random Publicly Disclosed Hackerone Reports When Bored
A python tool which runs to display random publicly disclosed Hackerone reports when bored. Automatically opens the report in browser. Contains Over 8k Publicly disclosed Hackerone reports and addtl. wordlist of 700 bug bounty writeups. This is a productivity tool for security enthusiasts and bug...
GLSA-202005-12 : OpenSLP: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202005-12 OpenSLP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenSLP. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...
May 12, 2020—KB4556853 (Security-only update)
None None...
May 12, 2020—KB4556860 (Monthly Rollup)
None None...
May 12, 2020—KB4556854 (Security-only update)
None None...
May 12, 2020—KB4556804 (OS Build 15063.2375)
None None...
RUSTSEC-2020-0025 bigint is unmaintained, use uint instead
The bigint crate is not maintained any more and contains several known bugs including a soundness bug; use uint instead...
Fedora 31 : 2:samba / libldb (2020-9cf0b1c8f1)
Update to Samba 4.11.8 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...
Debian DSA-4673-1 : tomcat8 - security update
Several vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling and code execution in the AJP connector disabled by default in Debian. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
DRUPAL-CONTRIB-2020-017
This module enables you to build forms and surveys in Drupal. The Webform Node sub-module allows these forms to be associated with a Drupal node. The Webform Node module does not implement access checking in the same manner as other nodes and entities. As such, writers of custom modules which...
Roundcube Webmail < 1.2.10, 1.3.x < 1.3.11, 1.4.x < 1.4.4 Multiple Vulnerabilities
Roundcube Webmail is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:roundcube:webmail"; if...
Telerik UI for ASP.NET AJAX RadAsyncUpload .NET Deserialization Vulnerability
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known due to the presence of CVE-2017-11317 or CVE-2017-11357, or other means. Exploitation can result in remote...
Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20200416)
Security Fixes : - Mozilla: Use-after-free while running the nsDocShell destructor CVE-2020-6819 - Mozilla: Use-after-free when handling a ReadableStream CVE-2020-6820 - Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method CVE-2020-6821 - Mozilla: Memory safety...
Scientific Linux Security Update : firefox on SL7.x x86_64 (20200407)
Mozilla: Use-after-free while running the nsDocShell destructor Mozilla: Use-after-free when handling a ReadableStream C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid135810; scriptversion"1.9";...
Description of Office Compatibility Pack SP3
Describes the improvements that Office Compatibility Pack SP3 provides and the issues that it fixes.IntroductionMicrosoft Office Compatibility Pack Service Pack 3 SP3 provides the latest updates to Office Compatibility Pack. These updates include two main categories of fixes: Previously unrelease...
Description of Office Access Runtime and Data Connectivity Components 2007 SP3
Describes the improvements that Office Access Runtime and Data Connectivity Components 2007 SP3 provides and the issues that it fixes.IntroductionMicrosoft Office Access Runtime and Data Connectivity Components 2007 Service Pack 3 SP3 provides the latest updates to Microsoft Office Access 2007...
Code injection
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Certain security settings, related to whether packages are verified and accepted only from known sources, are mishandled. The LG ID is LVE-SMP-190002 April 2019...
CVE-2019-20780
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Certain security settings, related to whether packages are verified and accepted only from known sources, are mishandled. The LG ID is LVE-SMP-190002 April 2019...
Visual Studio 2005 Service Pack 1 Release Notes
Contains the contents of the Release Notes from Visual Studio 2005 Service Pack 1 SP1.SummaryThis document lists known issues with the installation and uninstallation of Visual Studio 2005 Service Pack 1 SP1, and with Visual Studio 2005 SP1 features. For information about the functional changes...