SUSE SLES12 Security Update : systemd (SUSE-SU-2019:0054-1)

This update for systemd fixes the following issues : Fix security vulnerabilities CVE-2018-16864 and CVE-2018-16865 bsc1120323: Both issues were memory corruptions via attacker-controlled alloca which could have been used to gain root privileges by a local attacker. Fix security vulnerability...

SUSE-SU-2019:0054-1 Security update for systemd

This update for systemd fixes the following issues: Fix security vulnerabilities CVE-2018-16864 and CVE-2018-16865 bsc1120323: Both issues were memory corruptions via attacker-controlled alloca which could have been used to gain root privileges by a local attacker. Fix security vulnerability...

CVE-2018-17077

An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed...

CVE-2018-17077

An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed...

Cross site scripting

An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed...

CVE-2018-17077

An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed...

UBUNTU-CVE-2018-13259

An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one...

PT-2018-6268 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: The issue allows an attacker to send an authenticated HTTP request to trigger a buffer overflow. Specifically, at memory address 0x9d01bb1c, the value for the uri key is copied using strcpy to a buffer at...

Upload Failed due to an Internal Error - When Upgrade SD-WAN Center 9.0.0

When a customer attempts to upgrade their SD-WAN Center from 9.0.0 to versions 9.1.0 or above, they face the below error message in the GUI: Customer can also see the below error message in their browsers: Warning: POST Content-Length of 76632859 bytes exceeds the limit of 62914560 bytes in Unkno...

PHP msgfmt_parse_message stack buffer overflow vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

F5 BIG-IP APM Remote Denial of Service Vulnerability

The F5 BIG-IP is a load balancer that uses a variety of distribution algorithms to distribute network requests to available servers in a server cluster, enabling network visitors to have the best possible networking experience by managing incoming Web data traffic and increasing effective network...

Weblate: Specify maximal length in translation

Hi, It would be nice if you limit the length in translation the same problem here https://hackerone.com/reports/223931. You can see the "spam" here: https://demo.weblate.org/translate/hello/master/gl/?sid=c8c733d6-2a6b-11e7-9c94-5254000d9bae&offset=3 Thanks...

PT-2017-18030 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions through 7.1.4 Description: The issue allows attackers to cause a denial of service via operations on long strings, resulting in memory consumption and application crash. The vendor disputes this, stating that GMP safely aborts in...

The vulnerability of the embedded software of the programmable logic controller OVEEN PLK110 allows a perpetrator to create files that cannot be deleted.

The vulnerability of the embedded software of the OVEEN PLC110 programmable logic controller lies in the absence of restrictions on the length of filenames for written files. Exploiting this vulnerability allows a malicious actor to store files in the file system that cannot be deleted using the...

Micro Focus Rumba FTP Client 4.x Stack Overflow

Exploit Title: Rumba FTP Client 4.x stack overflow SEH Date: 29-10-2016 Exploit Author: Umit Aksu Vendor Homepage: http://community.microfocus.com/microfocus/mainframesolutions/rumba/w/knowledgebase/28731.rumba-ftp-4-x-security-update.aspx Software Link:...

SUSE-SU-2016:2388-1 Security update for openssh

This update for OpenSSH fixes the following issues: - Prevent user enumeration through the timing of password processing. bsc989363, CVE-2016-6210 - Allow lowering the DH groups parameter limit in server as well as when GSSAPI key exchange is used. bsc948902 - Sanitize input for xauth1. bsc970632...

SUSE SLED12 / SLES12 Security Update : openssh (SUSE-SU-2016:2280-1)

This update for openssh fixes the following issues : - Prevent user enumeration through the timing of password processing bsc989363, CVE-2016-6210 -preventtiminguserenumeration - Allow lowering the DH groups parameter limit in server as well as when GSSAPI key exchange is used bsc948902 - limit...

SUSE-SU-2016:2280-1 Security update for openssh

This update for openssh fixes the following issues: - Prevent user enumeration through the timing of password processing bsc989363, CVE-2016-6210 -preventtiminguserenumeration - Allow lowering the DH groups parameter limit in server as well as when GSSAPI key exchange is used bsc948902 - limit...

Updated ruby-mail packages fix security vulnerability

The Mail library does not impose a length limit on email addresses, so an attacker can send a long spam message via a recipient address unless there is a limit on the application's side. The attacker-injected message in the recipient address is processed by the server. This type of vulnerability...

The vulnerability of the Firefox browser, which allows a hacker to execute cross-site scripting attacks.

The vulnerability of the Firefox browser exists due to an incorrect limitation on URL strings. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...